AZL-57712
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-57712.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-57712
- Upstream
- Published
- 2025-03-02T02:15:36Z
- Modified
- 2026-04-01T05:19:11.529694Z
- Summary
- CVE-2025-25724 affecting package libarchive for versions less than 3.7.7-2
- Details
-
listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.
- References