CVE-2025-5918

Katalog CVE

CVSS 6.6 · Medium EPSS 0,38%

Kerentanan Out-of-bounds Read pada libarchive, redhat openshift container platform +1 lainnya. Skor CVSS 3.1 6.6 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

Rincian

Terbit di NVD

9 Juni 2025

Terakhir diubah

1 September 2026

Status NVD

Analyzed

CVSS 3.1

6.6 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 29,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2025-5918 advisory vendor
• https://github.com/libarchive/libarchive/pull/2584 patch
• https://bugzilla.redhat.com/show_bug.cgi?id=2370877 issue tracking
• https://github.com/libarchive/libarchive/releases/tag/v3.8.0 release notes