⌘ + K

UBUNTU-CVE-2025-5914

Dashboard / Vulnerabilities / UBUNTU-CVE-2025-5914

UBUNTU-CVE-2025-5914

Published: 9 Jun 2025Last Modified: 22 Apr 2026

Upstream:

CVE-2025-5914

Aliases:

USN-7601-1

USN-8147-1

Summary:

Details: A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

References: https://ubuntu.com/security/CVE-2025-5914, https://www.cve.org/CVERecord?id=CVE-2025-5914, https://github.com/libarchive/libarchive/pull/2598, https://access.redhat.com/security/cve/CVE-2025-5914, https://bugzilla.redhat.com/show_bug.cgi?id=2370861, https://github.com/libarchive/libarchive/releases/tag/v3.8.0, https://github.com/libarchive/libarchive/pull/2598/commits/196029dd0a17cd17c916eada9085839032b76ec9, https://ubuntu.com/security/notices/USN-7601-1, https://ubuntu.com/security/notices/USN-8147-1

Affected packages

Package

Name: libarchive

Purl: pkg:deb/ubuntu/[email protected]+esm4?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -3.1.2-7ubuntu2.8+esm4

Affected versions

3.1.2-5ubuntu1

3.1.2-7ubuntu1

3.1.2-7ubuntu2

3.1.2-7ubuntu2.1

3.1.2-7ubuntu2.2

3.1.2-7ubuntu2.3

3.1.2-7ubuntu2.4

3.1.2-7ubuntu2.6

3.1.2-7ubuntu2.7

3.1.2-7ubuntu2.8

3.1.2-7ubuntu2.8+esm1

3.1.2-7ubuntu2.8+esm3

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High