CVE-2025-60753

Beschreibung

An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://github.com/libarchive/libarchive/issues/2725 ExploitIssue TrackingPatch
• https://github.com/Papya-j/CVE/tree/main/CVE-2025-60753 ExploitThird Party Advisory