A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2025-5918 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2370877 | Issue Tracking |
| https://github.com/libarchive/libarchive/pull/2584 | Patch |
| https://github.com/libarchive/libarchive/releases/tag/v3.8.0 | Release Notes |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
15 Aug 2025, 18:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/security/cve/CVE-2025-5918 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2370877 - Issue Tracking | |
| References | () https://github.com/libarchive/libarchive/pull/2584 - Patch | |
| References | () https://github.com/libarchive/libarchive/releases/tag/v3.8.0 - Release Notes | |
| CPE | cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
|
| First Time |
Libarchive libarchive
Redhat Redhat enterprise Linux Libarchive Redhat openshift Container Platform |
12 Jun 2025, 16:06
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-09 20:15
Updated : 2025-08-15 18:35
NVD link : CVE-2025-5918
Mitre link : CVE-2025-5918
CVE.ORG link : CVE-2025-5918
JSON object : View
Products Affected
libarchive
- libarchive
redhat
- enterprise_linux
- openshift_container_platform
CWE
CWE-125
Out-of-bounds Read