Known vulnerabilities in libarchive (Red Hat package)
Vendor:
Red Hat Inc.
Software:
libarchive (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:libarchive_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
10
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
3.7.7-10.el10_2
3.5.3-11.el9_8
3.5.3-5.el9_4.1
3.3.3-1.el8_4.2
3.3.3-5.el8_8.2
3.3.3-6.el8_6.1
3.3.3-7.el8_10
3.3.2-8.el8_2.2
3.1.2-14.el7_9.2
3.5.3-9.el9_7
3.7.7-8.el10_1
3.5.3-4.el9_4.2
3.5.3-6.el9_6.1
3.5.3-2.el9_0.3
3.5.3-5.el9_2.1
3.5.3-7.el9_7
3.7.7-5.el10_1
3.5.3-5.el9_2
3.1.2-14.el7_9.1
3.3.3-1.el8_4.1
3.3.3-6.el8_6
3.3.2-8.el8_2.1
3.3.3-5.el8_8.1
3.5.3-4.el9_4.1
3.5.3-2.el9_0.1
3.7.7-4.el10_0
3.3.3-6.el8_10
3.5.3-6.el9_6
3.5.3-5.el9_6
3.7.7-3.el10_0
3.3.3-4.el8_6
3.3.3-5.el8
3.5.3-4.el9
3.5.3-2.el9_0
3.3.3-3.el8_5
3.3.3-1.el8
3.3.2-9.el8
3.3.2-8.el8_1
3.3.2-4.el8_0
3.1.2-14.el7_7
3.3.2-7.el8
3.1.2-12.el7
3.1.2-10.el7_2
2.8.3-7.el6_8
2.8.3-4.el6_2
2.8.3-3.el6_1
2.8.3-2.el6
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU143738 - Improper input validation CVE-2026-4424 |
CWE-20 | Medium | 3.7.7-8.el10_1 | 17.08.2026 |
SB2026081772 SB2026081773 SB2026081774 and 4 more |
||
| #VU124068 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-4111 |
CWE-835 | Medium | 3.5.3-2.el9_0.3, 3.5.3-4.el9_4.2, 3.5.3-5.el9_2.1, 3.5.3-6.el9_6.1, 3.5.3-7.el9_7, 3.7.7-5.el10_1 | 17.03.2026 |
SB2026031740 SB2026031920 SB2026031927 and 14 more |
||
| #VU111143 - Double Free CVE-2025-5914 |
CWE-415 | High | 3.1.2-14.el7_9.1, 3.3.2-8.el8_2.1, 3.3.3-1.el8_4.1, 3.3.3-5.el8_8.1, 3.3.3-6.el8_6, 3.3.3-6.el8_10, 3.5.3-2.el9_0.1, 3.5.3-4.el9_4.1, 3.5.3-5.el9_2, 3.5.3-6.el9_6, 3.7.7-4.el10_0 | 16.06.2025 |
SB2025061602 SB2025061603 SB2025061604 and 51 more |
||
| #VU105900 - Memory corruption CVE-2025-25724 |
CWE-119 | High | 3.5.3-5.el9_4.1, 3.5.3-5.el9_6, 3.7.7-3.el10_0 | 20.03.2025 |
SB2025032034 SB2025032045 SB2025032169 and 25 more |
||
| #VU69582 - NULL Pointer Dereference CVE-2022-36227 |
CWE-476 | Low | 3.3.3-4.el8_6, 3.3.3-5.el8, 3.5.3-4.el9 | 24.11.2022 |
SB2022112432 SB2022112437 SB2022112438 and 77 more |
||
| #VU62030 - Out-of-bounds read CVE-2022-26280 |
CWE-125 | Low | 3.5.3-2.el9_0 | 09.04.2022 |
SB2022040901 SB2022040902 SB2022041127 and 11 more |
||
| #VU61394 - UNIX Symbolic Link (Symlink) Following CVE-2021-31566 |
CWE-61 | Low | 3.3.3-3.el8_5 | 15.03.2022 |
SB2022031530 SB2022031601 SB2022032445 and 27 more |
||
| #VU61393 - UNIX Symbolic Link (Symlink) Following CVE-2021-23177 |
CWE-61 | Low | 3.3.3-3.el8_5 | 15.03.2022 |
SB2022031530 SB2022031601 SB2022032445 and 25 more |
||
| #VU22931 - Out-of-bounds read CVE-2019-19221 |
CWE-125 | Medium | 3.3.2-9.el8 | 22.11.2019 |
SB2019112216 SB2020030312 SB2020061710 and 13 more |
||
| #VU15954 - Off-by-one Error CVE-2017-14502 |
CWE-193 | Low | 3.3.3-1.el8 | 19.11.2018 |
SB2017091705 SB2018111908 SB2018111909 and 15 more |