AZL-69866

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-69866.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-69866

Upstream

CVE-2025-60753

Published

2025-11-05T16:15:40Z

Modified

2026-04-01T05:21:38.135817Z

Summary

CVE-2025-60753 affecting package libarchive for versions less than 3.7.7-4

Details

An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash).

References

https://nvd.nist.gov/vuln/detail/CVE-2025-60753

Affected packages

Azure Linux:3 / libarchive

Package

Name: libarchive
Purl: pkg:rpm/azure-linux/libarchive

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.7.7-4

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-69866.json"