Known vulnerabilities in libarchive (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
libarchive (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:libarchive_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
12
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.4.0-2ubuntu1.5+esm3
3.6.0-1ubuntu1.8
3.7.2-2ubuntu0.8
3.8.5-1ubuntu2.2
3.1.2-7ubuntu2.8+esm5
3.1.2-11ubuntu0.16.04.8+esm3
3.2.2-3.1ubuntu0.7+esm3
3.4.0-2ubuntu1.5+esm2
3.6.0-1ubuntu1.7
3.7.2-2ubuntu0.7
3.7.7-0ubuntu3.2
3.8.5-1ubuntu2.1
3.1.2-7ubuntu2.8+esm4
3.1.2-11ubuntu0.16.04.8+esm2
3.2.2-3.1ubuntu0.7+esm2
3.4.0-2ubuntu1.5+esm1
3.6.0-1ubuntu1.6
3.7.2-2ubuntu0.6
3.7.7-0ubuntu3.1
3.7.7-0ubuntu3
3.7.7-0ubuntu2.2
3.7.7-0ubuntu2
3.7.7-0ubuntu2.1
3.7.7-0ubuntu1
3.7.4-1ubuntu1
3.7.4-1ubuntu0.2
3.7.4-1ubuntu0.1
3.7.4-1
3.7.4-1.1
3.7.2-2ubuntu0.4
3.7.2-2ubuntu0.3
3.7.2-2ubuntu0.2
3.7.2-2ubuntu0.1
3.7.2-2
3.7.2-2.1
3.7.2-1.1ubuntu3
3.7.2-1.1ubuntu2
3.7.2-1
3.7.2-1ubuntu1
3.7.2-1ubuntu2
3.7.2-1.1
3.7.2-1.1ubuntu1
3.6.2-1
3.6.2-1ubuntu1
3.6.2-1ubuntu1.1
3.6.0-1ubuntu1.4
3.6.0-1ubuntu1.3
3.6.0-1ubuntu1.2
3.6.0-1
3.6.0-1ubuntu1
3.6.0-1ubuntu1.1
3.5.2-1ubuntu1
3.5.2-1
3.4.3-2ubuntu0.2
3.4.3-2ubuntu0.1
3.4.3-2build1
3.4.3-2
3.4.3-1build1
3.4.3-1
3.4.2-1
3.4.0-2ubuntu1.5
3.4.0-2ubuntu1.4
3.4.0-2ubuntu1.3
3.4.0-2ubuntu1.2
3.4.0-2
3.4.0-2ubuntu1.1
3.4.0-1ubuntu2
3.4.0-1ubuntu1
3.2.2-3.1ubuntu0.7
3.6.0-1ubuntu1.5
3.7.2-2ubuntu0.5
3.7.4-1ubuntu0.3
3.7.7-0ubuntu2.3
3.4.0
3.4.0-2ubuntu1
3.2.2
3.2.1
3.1.2
3.0.3
3.4.0-1ubuntu0.1
3.2.2-3.1ubuntu0.6
3.1.2-11ubuntu0.16.04.8
3.4.0-1build1
3.3.3-4ubuntu0.1
3.2.2-3.1ubuntu0.5
3.1.2-11ubuntu0.16.04.7
3.4.0-1
3.2.2-3.1ubuntu0.4
3.2.2-5ubuntu0.2
3.2.2-5ubuntu0.1
3.2.2-3.1ubuntu0.3
3.2.2-3.1ubuntu0.2
3.2.2-3.1ubuntu0.1
3.2.1-2~ubuntu16.04.1
3.1.2-11ubuntu0.16.04.6
3.1.2-11ubuntu0.16.04.5
3.1.2-11ubuntu0.16.04.4
3.1.2-7ubuntu2.8
3.1.2-7ubuntu2.7
3.1.2-7ubuntu2.6
3.2.2-3
3.2.2-3.1
3.2.2-4
3.2.2-4.1
3.2.2-4.2
3.2.2-5
3.3.3-1
3.3.3-2
3.3.3-3
3.3.3-4
3.2.2-1
3.2.2-2
3.2.1-6
3.2.1-3
3.2.1-4
3.2.1-5
3.2.1-2ubuntu0.1
3.2.1-2
3.2.1-1
3.2.0-1
3.2.0-2
3.1.2-9ubuntu0.1
3.1.2-7ubuntu2.4
3.1.2-7ubuntu2.3
3.1.2-7ubuntu2.2
3.1.2-7ubuntu1
3.1.2-7ubuntu2
3.1.2-7ubuntu2.1
3.1.2-11ubuntu1
3.1.2-11ubuntu0.16.04.3
3.1.2-11ubuntu0.16.04.2
3.1.2-11ubuntu0.16.04.1
3.1.2-11ubuntu0.15.10.2
3.1.2-11ubuntu0.15.10.1
3.1.2-11build1
3.0.3-7
3.0.4-1
3.0.4-2
3.0.4-3
3.1.0-1
3.1.1-1
3.1.2-1
3.1.2-2
3.1.2-3
3.1.2-4
3.1.2-5
3.1.2-6
3.1.2-7
3.1.2-8
3.1.2-9
3.1.2-10
3.1.2-11
3.0.3-6ubuntu1.4
3.0.3-6ubuntu1.3
3.0.3-6ubuntu1.2
1.02.034-1
1.02.034-2
1.02.036-1
1.02.036-2
1.2.53-1
1.2.53-2
1.3.1-1
2.0.25-1
2.0.25-2
2.0.25-3
2.2.3-1
2.2.4-1
2.4.11-1
2.4.14-1
2.4.17-1
2.4.17-2
2.6.1-1
2.6.2-1
2.6.2-2
2.8.0-1
2.8.0-2
2.8.3-1
2.8.4-1
2.8.4-2
2.8.5-1
2.8.5-2
2.8.5-3
2.8.5-4
2.8.5-5
3.0.0a-1
3.0.1b-1
3.0.2-1
3.0.2-3
3.0.3-1
3.0.3-2
3.0.3-3
3.0.3-4
3.0.3-5
3.0.3-6
3.0.3-6ubuntu1
3.0.3-6ubuntu1.1
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124068 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-4111 |
CWE-835 | Medium | 3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 | 17.03.2026 |
SB2026031740 SB2026031920 SB2026031927 and 14 more |
||
| #VU118347 - Resource exhaustion CVE-2025-60753 |
CWE-400 | Medium | 3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 | 12.11.2025 |
SB2025111209 SB2025112820 SB2025112821 and 6 more |
||
| #VU111148 - Heap-based Buffer Overflow CVE-2025-5915 |
CWE-122 | High | 3.6.0-1ubuntu1.5, 3.7.2-2ubuntu0.5, 3.7.4-1ubuntu0.3, 3.7.7-0ubuntu2.3 | 16.06.2025 |
SB2025061602 SB2025061603 SB2025061604 and 6 more |
||
| #VU111147 - Out-of-bounds read CVE-2025-5918 |
CWE-125 | Medium | 3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 | 16.06.2025 |
SB2025061602 SB2025061603 SB2025061604 and 13 more |
||
| #VU111146 - Integer overflow CVE-2025-5916 |
CWE-190 | High | 3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.5, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.5, 3.7.2-2ubuntu0.6, 3.7.4-1ubuntu0.3, 3.7.7-0ubuntu2.3, 3.7.7-0ubuntu3.1 | 16.06.2025 |
SB2025061602 SB2025061603 SB2025061604 and 11 more |
||
| #VU111144 - Off-by-one Error CVE-2025-5917 |
CWE-193 | High | 3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.5, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.5, 3.7.2-2ubuntu0.6, 3.7.4-1ubuntu0.3, 3.7.7-0ubuntu2.3, 3.7.7-0ubuntu3.1 | 16.06.2025 |
SB2025061602 SB2025061603 SB2025061604 and 9 more |
||
| #VU111143 - Double Free CVE-2025-5914 |
CWE-415 | High | 3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.5, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.5, 3.7.2-2ubuntu0.6, 3.7.4-1ubuntu0.3, 3.7.7-0ubuntu2.3, 3.7.7-0ubuntu3.1 | 16.06.2025 |
SB2025061602 SB2025061603 SB2025061604 and 51 more |
||
| #VU105900 - Memory corruption CVE-2025-25724 |
CWE-119 | High | 3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 | 20.03.2025 |
SB2025032034 SB2025032045 SB2025032169 and 25 more |
||
| #VU85183 - Integer overflow CVE-2024-20696 |
CWE-190 | High | 3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 | 09.01.2024 |
SB2024010941 SB2024060636 SB2024061505 and 13 more |
||
| #VU25750 - Memory corruption CVE-2020-9308 |
CWE-119 | High | 3.1.2-11ubuntu0.16.04.8, 3.2.2-3.1ubuntu0.6, 3.4.0-1ubuntu0.1 | 03.03.2020 |
SB2020030311 SB2020030312 SB2020031513 and 5 more |
||
| #VU22931 - Out-of-bounds read CVE-2019-19221 |
CWE-125 | Medium | 3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.6, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-1ubuntu0.1, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 | 22.11.2019 |
SB2019112216 SB2020030312 SB2020061710 and 13 more |
||
| #VU22332 - Use After Free CVE-2019-18408 |
CWE-416 | High | 3.1.2-11ubuntu0.16.04.7, 3.2.2-3.1ubuntu0.5, 3.3.3-4ubuntu0.1 | 29.10.2019 |
SB2019102911 SB2019102912 SB2019110110 and 11 more |