リモートの SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 ホストには、SUSE-SU-2025:02566-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    - CVE-2025-5914: archive_read_format_rar_seek_data() 関数の整数オーバーフローによる二重解放を修正 (bsc#1244272)
    - CVE-2025-5915: archive_read_support_format_rar.c の copy_from_lzss_window() におけるヒープバッファオーバーリードを修正 (bsc#1244273)
    - CVE-2025-5916: archive_read_support_format_warc.c で warc ファイルを読み取る際の整数オーバーフローを修正 (bsc#1244270)
    - CVE-2025-5917: archive_write_set_format_pax.c の build_ustar_entry_name() における off-by-one エラーを修正 (bsc#1244336)
    - CVE-2025-5918: パイプされたファイルストリームに対して EOF を越えた読み取りが発生する可能性のあることを修正 (bsc#1244279)

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの SUSE Linux SLES15 / SLES_SAP15 ホストには、SUSE-SU-2025:02718-2 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    - CVE-2025-5914: archive_read_format_rar_seek_data() 関数の整数オーバーフローによる二重解放を修正 (bsc#1244272)
    - CVE-2025-5915: archive_read_support_format_rar.c の copy_from_lzss_window() におけるヒープバッファオーバーリードを修正 (bsc#1244273)
    - CVE-2025-5916: archive_read_support_format_warc.c で warc ファイルを読み取る際の整数オーバーフローを修正 (bsc#1244270)
    - CVE-2025-5917: archive_write_set_format_pax.c の build_ustar_entry_name() における off-by-one エラーを修正 (bsc#1244336)
    - CVE-2025-5918: パイプされたファイルストリームに対して EOF を越えた読み取りが発生する可能性のあることを修正 (bsc#1244279)

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 libarchive 库中发现一个漏洞。将文件流通过管道传输到 bsdtar 时，可触发此缺陷，从而可能允许读取超出文件末尾的内容。此越界读取可导致意外后果，包括不可预测的程序行为、内存损坏或拒绝服务情况。(CVE-2025-5918)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - libarchive ライブラリで脆弱性が特定されました。この欠陥は、ファイルストリームが bsdtar にパイプされる際に発生し、ファイルの終端を越えた読み込みを可能にします。この領域外読み取りは、予測できないプログラム動作、メモリ破損、サービス拒否状態など、意図しない結果を引き起こす可能性があります。(CVE-2025-5918)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - libarchive 程式庫中發現存在弱點。將檔案資料流透過管道傳送至 bsdtar 時可觸發此瑕疵，進而可能允許在超出檔案結尾處進行讀取。此超出邊界讀取可導致非預期的後果，包括無法預測的程式行為、記憶體損毀或拒絕服務情況。(CVE-2025-5918)

請注意，Nessus 依賴供應商報告的套件存在。

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one'     miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write     overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable     program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more     sophisticated exploitation.(CVE-2025-5917)

    A vulnerability has been identified in the libarchive library, specifically within the     archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately     lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption,     enabling an attacker to execute arbitrary code or cause a denial-of-service condition.(CVE-2025-5914)

    A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that     can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4     content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially     leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within     applications that process such archives using libarchive.(CVE-2025-5916)

    A vulnerability has been identified in the libarchive library. This flaw can be triggered when file     streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-     bounds read can lead to unintended consequences, including unpredictable program behavior, memory     corruption, or a denial-of-service condition.(CVE-2025-5918)

Tenable has extracted the preceding description block directly from the EulerOS libarchive security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability has been identified in the libarchive library. This flaw can be triggered when file     streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-     bounds read can lead to unintended consequences, including unpredictable program behavior, memory     corruption, or a denial-of-service condition.(CVE-2025-5918)

    A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one'     miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write     overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable     program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more     sophisticated exploitation.(CVE-2025-5917)

    A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that     can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4     content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially     leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within     applications that process such archives using libarchive.(CVE-2025-5916)

    A vulnerability has been identified in the libarchive library, specifically within the     archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately     lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption,     enabling an attacker to execute arbitrary code or cause a denial-of-service condition.(CVE-2025-5914)

Tenable has extracted the preceding description block directly from the EulerOS libarchive security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been identified in the libarchive library. This flaw can be triggered when file     streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-     bounds read can lead to unintended consequences, including unpredictable program behavior, memory     corruption, or a denial-of-service condition. (CVE-2025-5918)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability has been identified in the libarchive library, specifically within the     archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately     lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption,     enabling an attacker to execute arbitrary code or cause a denial-of-service condition.(CVE-2025-5914)

    A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that     can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4     content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially     leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within     applications that process such archives using libarchive.(CVE-2025-5916)

    A vulnerability has been identified in the libarchive library. This flaw can be triggered when file     streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-     bounds read can lead to unintended consequences, including unpredictable program behavior, memory     corruption, or a denial-of-service condition.(CVE-2025-5918)

    A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one'     miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write     overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable     program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more     sophisticated exploitation.(CVE-2025-5917)

Tenable has extracted the preceding description block directly from the EulerOS libarchive security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02566-1 advisory.

    - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data()     function (bsc#1244272)
    - CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() at     archive_read_support_format_rar.c (bsc#1244273)
    - CVE-2025-5916: Fixed integer overflow while reading warc files at archive_read_support_format_warc.c     (bsc#1244270)
    - CVE-2025-5917: Fixed off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c     (bsc#1244336)
    - CVE-2025-5918: Fixed reading past EOF may be triggered for piped file streams (bsc#1244279)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02718-2 advisory.

    - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data()     function (bsc#1244272)
    - CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() at     archive_read_support_format_rar.c (bsc#1244273)
    - CVE-2025-5916: Fixed integer overflow while reading warc files at archive_read_support_format_warc.c     (bsc#1244270)
    - CVE-2025-5917: Fixed off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c     (bsc#1244336)
    - CVE-2025-5918: Fixed reading past EOF may be triggered for piped file streams (bsc#1244279)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
243270	SUSE SLED15 / SLES15 / openSUSE 15 セキュリティ更新 : libarchive (SUSE-SU-2025:02566-1)	Nessus	SuSE Local Security Checks	2025/8/1	2025/8/1	critical
253437	SUSE SLES15 セキュリティ更新プログラム : libarchive (SUSE-SU-2025:02718-2)	Nessus	SuSE Local Security Checks	2025/8/21	2025/8/21	medium
244236	Linux Distros 未修补的漏洞：CVE-2025-5918	Nessus	Misc.	2025/8/6	2025/9/14	medium
244236	Linux Distros のパッチ未適用の脆弱性: CVE-2025-5918	Nessus	Misc.	2025/8/6	2025/9/14	medium
244236	Linux Distros 未修補的弱點：CVE-2025-5918	Nessus	Misc.	2025/8/6	2025/9/14	medium
261867	EulerOS 2.0 SP10 : libarchive (EulerOS-SA-2025-2073)	Nessus	Huawei Local Security Checks	2025/9/10	2025/9/10	medium
264867	EulerOS 2.0 SP13 : libarchive (EulerOS-SA-2025-2135)	Nessus	Huawei Local Security Checks	2025/9/16	2025/9/16	medium
244236	Linux Distros Unpatched Vulnerability : CVE-2025-5918	Nessus	Misc.	2025/8/6	2025/9/14	medium
261891	EulerOS 2.0 SP10 : libarchive (EulerOS-SA-2025-2101)	Nessus	Huawei Local Security Checks	2025/9/10	2025/9/10	medium
264852	EulerOS 2.0 SP13 : libarchive (EulerOS-SA-2025-2145)	Nessus	Huawei Local Security Checks	2025/9/16	2025/9/16	medium
249284	EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2025-1958)	Nessus	Huawei Local Security Checks	2025/8/14	2025/8/14	high
261897	EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2025-2044)	Nessus	Huawei Local Security Checks	2025/9/10	2025/9/10	medium
243270	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2025:02566-1)	Nessus	SuSE Local Security Checks	2025/8/1	2025/8/1	critical
261874	EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2025-2013)	Nessus	Huawei Local Security Checks	2025/9/10	2025/9/10	medium
249315	EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2025-1932)	Nessus	Huawei Local Security Checks	2025/8/14	2025/8/14	high
253437	SUSE SLES15 Security Update : libarchive (SUSE-SU-2025:02718-2)	Nessus	SuSE Local Security Checks	2025/8/21	2025/8/21	medium

检测

插件搜索

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

critical

medium

high

medium