UBUNTU-CVE-2025-5915

    Dashboard / Vulnerabilities / UBUNTU-CVE-2025-5915

    UBUNTU-CVE-2025-5915

    Published: 9 Jun 2025Last Modified: 22 Apr 2026
    Upstream:
    CVE-2025-5915
    Aliases:
    USN-7601-1

    Summary:

    Details: A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.

    References: https://ubuntu.com/security/CVE-2025-5915, https://www.cve.org/CVERecord?id=CVE-2025-5915, https://github.com/libarchive/libarchive/pull/2599, https://access.redhat.com/security/cve/CVE-2025-5915, https://bugzilla.redhat.com/show_bug.cgi?id=2370865, https://github.com/libarchive/libarchive/releases/tag/v3.8.0, https://ubuntu.com/security/notices/USN-7601-1

    Affected packages

    Package

    Name: libarchive

    Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=jammy

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -3.6.0-1ubuntu1.5

    Affected versions

    3.4.3-2
    3.4.3-2build1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High