PT-2026-25310 · Unknown+4 · Libarchive+4
Elhanan Haenel
·
Published
2026-01-01
·
Updated
2026-05-14
·
CVE-2026-4111
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
libarchive (affected versions not specified)
Description
A flaw exists in the RAR5 archive decompression logic within the
archive read data() processing path of the libarchive library. Processing a specially crafted RAR5 archive can cause the decompression routine to enter a state preventing progress, resulting in an infinite loop that continuously consumes CPU resources. The archive appears structurally valid and passes checksum validation, making detection difficult for affected applications before processing. This can lead to persistent denial-of-service conditions in services that automatically process archives.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Infinite Loop
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Red Os
Rocky Linux
Ubuntu
Libarchive