libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7510 advisory.

    * libarchive: heap buffer over-read in header_gnu_longlink (CVE-2024-57970)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7510 advisory.

    - Fix for CVE-2024-57970

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7510 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: heap buffer over-read in header_gnu_longlink (CVE-2024-57970)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in
    archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a
    GNU long linkname. (CVE-2024-57970)

  - A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects
    the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is
    possible to launch the attack on the local host. The exploit has been disclosed to the public and may be
    used. The vendor was contacted early about this disclosure but did not respond in any way. (CVE-2025-1632)

  - list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which
    can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a
    verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.
    (CVE-2025-25724)

The version of libarchive installed on the remote host is prior to 3.7.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-079-01 advisory.

    New libarchive packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the libarchive security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
266557	RockyLinux 10 : libarchive (RLSA-2025:7510)	Nessus	Rocky Linux Local Security Checks	medium
240876	Oracle Linux 10 : libarchive (ELSA-2025-7510)	Nessus	Oracle Linux Local Security Checks	medium
237836	RHEL 10 : libarchive (RHSA-2025:7510)	Nessus	Red Hat Local Security Checks	medium
424790	Alpine: multiple libarchive packages: security update to 3.7.9-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
424790	Alpine: multiple libarchive packages: security update to 3.7.9-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
233053	Slackware Linux 15.0 / current libarchive Multiple Vulnerabilities (SSA:2025-079-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2024-57970

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium