PT-2026-25310 · Unknown+4 · Libarchive+4
Elhanan Haenel
·
Publicado
2026-01-01
·
Atualizado
2026-05-14
·
CVE-2026-4111
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
libarchive (affected versions not specified)
Description
A flaw exists in the RAR5 archive decompression logic within the
archive read data() processing path of the libarchive library. Processing a specially crafted RAR5 archive can cause the decompression routine to enter a state preventing progress, resulting in an infinite loop that continuously consumes CPU resources. The archive appears structurally valid and passes checksum validation, making detection difficult for affected applications before processing. This can lead to persistent denial-of-service conditions in services that automatically process archives.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linuxmint
Red Os
Rocky Linux
Ubuntu
Libarchive