https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:54:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-05203 bdu:2025-05203 https://cve.radiocsirt.org/vuln/bdu:2025-05203 https://cve.radiocsirt.org/vuln/bell-cve-2025-1632 <p><strong>Affected:</strong> Alpaquita:23: libarchive, Alpaquita:stream: libarchive</p> <p><strong>Affected:</strong> Alpaquita:23: libarchive, Alpaquita:stream: libarchive</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-1632 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-218715 EUVD-2026-218715 https://cve.radiocsirt.org/vuln/euvd-2026-218715 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1632 <p>A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.</p> <p>A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-1632 https://cve.radiocsirt.org/vuln/ghsa-cw9m-pj72-3cj5 <p>A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.</p> <p>A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.</p> https://cve.radiocsirt.org/vuln/ghsa-cw9m-pj72-3cj5 https://cve.radiocsirt.org/vuln/msrc_cve-2025-1632 msrc_CVE-2025-1632 https://cve.radiocsirt.org/vuln/msrc_cve-2025-1632 https://cve.radiocsirt.org/vuln/oesa-2025-1310 <p><strong>Affected:</strong> openEuler:24.03-LTS: libarchive</p> <p>is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security Fix(es):</p> <p>A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.(CVE-2025-1632)</p> <p>list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.(CVE-2025-25724)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: libarchive</p> <p>is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security Fix(es):</p> <p>A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.(CVE-2025-1632)</p> <p>list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.(CVE-2025-25724)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1310 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14882-1 <p>bsdtar-3.7.7-3.1 on GA media</p> <p>bsdtar-3.7.7-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14882-1 https://cve.radiocsirt.org/vuln/suse-su-2025:0985-1 <p>Security update for libarchive</p> <p>Security update for libarchive</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0985-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-1632 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: libarchive</p> <p>A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: libarchive</p> <p>A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-1632 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0432 <p>Ein lokaler Angreifer kann eine Schwachstelle in libarchive ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in libarchive ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0432