Known vulnerabilities in libarchive (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:libarchive_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 12
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libarchive (Ubuntu package) libarchive (Ubuntu package) is affected by 12 known vulnerabilities: 8 high, 4 medium Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124068 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-4111
CWE-835 Medium
No
No
3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 17.03.2026 SB2026031740
SB2026031920
SB2026031927
and 14 more
#VU118347 - Resource exhaustion
CVE-2025-60753
CWE-400 Medium
No
No
3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 12.11.2025 SB2025111209
SB2025112820
SB2025112821
and 6 more
#VU111148 - Heap-based Buffer Overflow
CVE-2025-5915
CWE-122 High
No
No
3.6.0-1ubuntu1.5, 3.7.2-2ubuntu0.5, 3.7.4-1ubuntu0.3, 3.7.7-0ubuntu2.3 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 6 more
#VU111147 - Out-of-bounds read
CVE-2025-5918
CWE-125 Medium
No
No
3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 13 more
#VU111146 - Integer overflow
CVE-2025-5916
CWE-190 High
No
No
3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.5, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.5, 3.7.2-2ubuntu0.6, 3.7.4-1ubuntu0.3, 3.7.7-0ubuntu2.3, 3.7.7-0ubuntu3.1 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 11 more
#VU111144 - Off-by-one Error
CVE-2025-5917
CWE-193 High
No
No
3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.5, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.5, 3.7.2-2ubuntu0.6, 3.7.4-1ubuntu0.3, 3.7.7-0ubuntu2.3, 3.7.7-0ubuntu3.1 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 9 more
#VU111143 - Double Free
CVE-2025-5914
CWE-415 High
No
No
3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.5, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.5, 3.7.2-2ubuntu0.6, 3.7.4-1ubuntu0.3, 3.7.7-0ubuntu2.3, 3.7.7-0ubuntu3.1 16.06.2025 SB2025061602
SB2025061603
SB2025061604
and 51 more
#VU105900 - Memory corruption
CVE-2025-25724
CWE-119 High
No
No
3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 20.03.2025 SB2025032034
SB2025032045
SB2025032169
and 25 more
#VU85183 - Integer overflow
CVE-2024-20696
CWE-190 High
Available
No
3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 09.01.2024 SB2024010941
SB2024060636
SB2024061505
and 13 more
#VU25750 - Memory corruption
CVE-2020-9308
CWE-119 High
No
No
3.1.2-11ubuntu0.16.04.8, 3.2.2-3.1ubuntu0.6, 3.4.0-1ubuntu0.1 03.03.2020 SB2020030311
SB2020030312
SB2020031513
and 5 more
#VU22931 - Out-of-bounds read
CVE-2019-19221
CWE-125 Medium
No
No
3.1.2-7ubuntu2.8+esm4, 3.1.2-11ubuntu0.16.04.8, 3.1.2-11ubuntu0.16.04.8+esm2, 3.2.2-3.1ubuntu0.6, 3.2.2-3.1ubuntu0.7+esm2, 3.4.0-1ubuntu0.1, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.6, 3.7.2-2ubuntu0.6, 3.7.7-0ubuntu3.1 22.11.2019 SB2019112216
SB2020030312
SB2020061710
and 13 more
#VU22332 - Use After Free
CVE-2019-18408
CWE-416 High
No
No
3.1.2-11ubuntu0.16.04.7, 3.2.2-3.1ubuntu0.5, 3.3.3-4ubuntu0.1 29.10.2019 SB2019102911
SB2019102912
SB2019110110
and 11 more