A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.

An update of the libarchive package has been released.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0465 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-5918:
    A vulnerability has been identified in the libarchive library. This flaw can be triggered when file     streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-     bounds read can lead to unintended consequences, including unpredictable program behavior, memory     corruption, or a denial-of-service condition.

    CVE-2025-5917:
    A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one'     miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write     overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable     program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more     sophisticated exploitation.

    CVE-2025-5916:
    A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that     can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4     content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially     leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within     applications that process such archives using libarchive.

    CVE-2025-5915:
    A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-     read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window.
    This means the library may attempt to read beyond the allocated memory buffer, which can result in     unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information     from adjacent memory regions.

    CVE-2025-5914:
    A vulnerability has been identified in the libarchive library, specifically within the     archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately     lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption,     enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02718-2 advisory.

    - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data()     function (bsc#1244272)
    - CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() at     archive_read_support_format_rar.c (bsc#1244273)
    - CVE-2025-5916: Fixed integer overflow while reading warc files at archive_read_support_format_warc.c     (bsc#1244270)
    - CVE-2025-5917: Fixed off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c     (bsc#1244336)
    - CVE-2025-5918: Fixed reading past EOF may be triggered for piped file streams (bsc#1244279)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-     read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window.
    This means the library may attempt to read beyond the allocated memory buffer, which can result in     unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information     from adjacent memory regions. (CVE-2025-5915)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1091 advisory.

    A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-     read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window.
    This means the library may attempt to read beyond the allocated memory buffer, which can result in     unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information     from adjacent memory regions. (CVE-2025-5915)

    A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one'     miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write     overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable     program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more     sophisticated exploitation. (CVE-2025-5917)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02566-1 advisory.

    - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data()     function (bsc#1244272)
    - CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() at     archive_read_support_format_rar.c (bsc#1244273)
    - CVE-2025-5916: Fixed integer overflow while reading warc files at archive_read_support_format_warc.c     (bsc#1244270)
    - CVE-2025-5917: Fixed off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c     (bsc#1244336)
    - CVE-2025-5918: Fixed reading past EOF may be triggered for piped file streams (bsc#1244279)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7601-1 advisory.

    It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could     possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2025-5914)

    It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could     possibly use this issue to read sensitive data or cause a denial of service. (CVE-2025-5915)

    It was discovered that libarchive incorrectly handled certain WARC archive files. If a user or automated     system were tricked into processing a specially crafted WARC archive, an attacker could use this issue to     cause libarchive to crash, resulting in a denial of service. (CVE-2025-5916)

    It was discovered that libarchive incorrectly handled certain file names when handling prefixes and     suffixes. An attacker could possibly use this issue to cause libarchive to crash, resulting in a denial of     service. (CVE-2025-5917)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
333781	Photon OS 5.0: Libarchive PHSA-2025-5.0-91-0672	Nessus	PhotonOS Local Security Checks	Local	medium
276048	TencentOS Server 4: libarchive (TSSA-2025:0465)	Nessus	Tencent Local Security Checks	Local	high
275317	Photon OS 5.0: Libarchive PHSA-2025-5.0-0672	Nessus	PhotonOS Local Security Checks	Local	medium
253437	SUSE SLES15 Security Update : libarchive (SUSE-SU-2025:02718-2)	Nessus	SuSE Local Security Checks	Local	medium
248896	Linux Distros Unpatched Vulnerability : CVE-2025-5915	Nessus	Misc.	Local	medium
243483	Amazon Linux 2023 : bsdcat, bsdcpio, bsdtar (ALAS2023-2025-1091)	Nessus	Amazon Linux Local Security Checks	Local	low
243270	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2025:02566-1)	Nessus	SuSE Local Security Checks	Local	critical
241063	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : libarchive vulnerabilities (USN-7601-1)	Nessus	Ubuntu Local Security Checks	Local	critical

Detections

Analytics

CVE-2025-5915

medium

Tenable Plugins

medium

high

medium

medium

medium

low

critical

critical