PT-2025-9197 · Unknown+9 · Libarchive+9
Ekkosun
·
Published
2025-03-01
·
Updated
2026-04-02
·
CVE-2025-25724
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
libarchive versions prior to 3.7.8
Description
The issue is related to the
list item verbose function in tar/util.c, which does not check the return value of strftime. This can lead to a denial of service or other unspecified impact when a crafted TAR archive is read with a verbose value of 2. The problem may occur due to insufficient buffer size, such as the 100-byte buffer, for custom locales.Recommendations
For versions prior to 3.7.8, update to version 3.7.8 or later to resolve the issue.
Exploit
Fix
DoS
Unchecked Return Value
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Astra Linux
Debian
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Libarchive