NULL pointer dereference in libarchive - CVE-2025-1632

Vulnerability identifier: #VU105902

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-1632

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in bsdunzip.c. A remote attacker can pass specially crafted archive to the application and perform a denial of service (DoS) attack.

libarchive
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Slackware Linux
Basesystem Module
Development Tools Module
openSUSE Leap
Ubuntu
Anolis OS
openEuler
APEX Cloud Platform for Microsoft Azure
Cloud Pak for Data System - Cyclops
APEX Cloud Platform for Red Hat OpenShift
libarchive-tools (Ubuntu package)
libarchive13 (Ubuntu package)
bsdcpio
libarchive-doc
libarchive-devel
libarchive
bsdunzip
bsdtar
bsdcat
libarchive-help
libarchive-debuginfo
libarchive-debugsource
libarchive13t64 (Ubuntu package)
libarchive13-32bit-debuginfo
libarchive13-64bit
libarchive13-64bit-debuginfo
libarchive13-32bit
libarchive13-debuginfo
bsdtar-debuginfo
libarchive13

Install update from vendor's website.

libarchive - update to 3.7.8
APEX Cloud Platform for Microsoft Azure - addressed in versions 01.04.01.00, 01.05.01.00
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
libarchive-tools (Ubuntu package) - addressed in versions 3.4.0-2ubuntu1.5, 3.6.0-1ubuntu1.4, 3.7.2-2ubuntu0.4, 3.7.4-1ubuntu0.2, 3.7.7-0ubuntu2.1
libarchive13 (Ubuntu package) - addressed in versions 3.4.0-2ubuntu1.5, 3.6.0-1ubuntu1.4
bsdcpio - update to 3.7.1-4
libarchive-doc - update to 3.7.1-4
libarchive-devel - update to 3.7.1-4
libarchive - update to 3.7.1-4
bsdunzip - update to 3.7.1-4
bsdtar - update to 3.7.1-4
bsdcat - update to 3.7.1-4
libarchive - update to 3.7.1-6
libarchive-help - update to 3.7.1-6
libarchive-devel - update to 3.7.1-6
libarchive-debuginfo - update to 3.7.1-6
bsdcat - update to 3.7.1-6
bsdcpio - update to 3.7.1-6
bsdtar - update to 3.7.1-6
bsdunzip - update to 3.7.1-6
libarchive-debugsource - update to 3.7.1-6
libarchive13t64 (Ubuntu package) - addressed in versions 3.7.2-2ubuntu0.4, 3.7.4-1ubuntu0.2, 3.7.7-0ubuntu2.1
libarchive13-32bit-debuginfo - update to 3.7.2-150600.3.12.1
libarchive13-64bit - update to 3.7.2-150600.3.12.1
libarchive13-64bit-debuginfo - update to 3.7.2-150600.3.12.1
libarchive13-32bit - update to 3.7.2-150600.3.12.1
libarchive-debugsource - update to 3.7.2-150600.3.12.1
bsdtar - update to 3.7.2-150600.3.12.1
libarchive13-debuginfo - update to 3.7.2-150600.3.12.1
bsdtar-debuginfo - update to 3.7.2-150600.3.12.1
libarchive13 - update to 3.7.2-150600.3.12.1
libarchive-devel - update to 3.7.2-150600.3.12.1
libarchive - update to 3.7.8
Cloud Pak for Data System - Cyclops - update to 11.3.1.1

• https://github.com/Ekkosun/pocs/blob/main/bsdunzip-poc
• https://github.com/libarchive/libarchive/releases/tag/v3.7.8
• https://github.com/libarchive/libarchive/pull/2532

• Multiple vulnerabilities in Libarchive
• Slackware Linux update for libarchive
• openEuler 24.03 LTS update for libarchive
• openEuler 24.03 LTS SP1 update for libarchive
• SUSE update for libarchive
• Ubuntu update for libarchive
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Anolis OS update for libarchive
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Multiple vulnerabilities in IBM Cloud Pak for Data System - Cyclops