A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive.

euleros EulerOS-SA-2025-1932: An update for libarchive is now available for EulerOS V2.0SP11

euleros EulerOS-SA-2025-1958: An update for libarchive is now available for EulerOS V2.0SP11(x86_64)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that     can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4     content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially     leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within     applications that process such archives using libarchive. (CVE-2025-5916)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02566-1 advisory.

    - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data()     function (bsc#1244272)
    - CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() at     archive_read_support_format_rar.c (bsc#1244273)
    - CVE-2025-5916: Fixed integer overflow while reading warc files at archive_read_support_format_warc.c     (bsc#1244270)
    - CVE-2025-5917: Fixed off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c     (bsc#1244336)
    - CVE-2025-5918: Fixed reading past EOF may be triggered for piped file streams (bsc#1244279)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02522-1 advisory.

    - CVE-2025-5916, Fixed integer overflow while reading warc files at archive_read_support_format_warc.c     (bsc#1244270)
    - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data()     function (bsc#1244272)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7601-1 advisory.

    It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could     possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2025-5914)

    It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could     possibly use this issue to read sensitive data or cause a denial of service. (CVE-2025-5915)

    It was discovered that libarchive incorrectly handled certain WARC archive files. If a user or automated     system were tricked into processing a specially crafted WARC archive, an attacker could use this issue to     cause libarchive to crash, resulting in a denial of service. (CVE-2025-5916)

    It was discovered that libarchive incorrectly handled certain file names when handling prefixes and     suffixes. An attacker could possibly use this issue to cause libarchive to crash, resulting in a denial of     service. (CVE-2025-5917)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
245760	Linux Distros Unpatched Vulnerability : CVE-2025-5916	Nessus	Misc.	low
243270	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2025:02566-1)	Nessus	SuSE Local Security Checks	critical
242870	SUSE SLES12 Security Update : libarchive (SUSE-SU-2025:02522-1)	Nessus	SuSE Local Security Checks	critical
241063	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : libarchive vulnerabilities (USN-7601-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2025-5916

low

Tenable Plugins

Coming Soon

low

critical

critical

critical