Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-2158

NIXPKGS-2026-2158
published 1 week, 4 days ago
Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header
Permalink CVE-2026-15028
3.9 LOW
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): None (N)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): Low (L)
updated 1 week, 4 days ago by @LeSuisse Activity log
  • Created suggestion 1 week, 4 days ago
  • @LeSuisse ignored
    17 packages
    • libarchive-qt
    • haskellPackages.libarchive
    • kodiPackages.vfs-libarchive
    • perlPackages.ArchiveLibarchive
    • python313Packages.libarchive-c
    • python314Packages.libarchive-c
    • perl5Packages.ArchiveLibarchive
    • haskellPackages.archive-libarchive
    • haskellPackages.libarchive-conduit
    • perlPackages.ArchiveLibarchivePeek
    • perlPackages.TestArchiveLibarchive
    • perl5Packages.ArchiveLibarchivePeek
    • python314Packages.extractcode-libarchive
    • python313Packages.extractcode-libarchive
    • perl5Packages.ArchiveLibarchiveExtract
    • perlPackages.ArchiveLibarchiveExtract
    • perl5Packages.TestArchiveLibarchive
    1 week, 4 days ago
  • @LeSuisse accepted 1 week, 4 days ago
  • @LeSuisse published on GitHub 1 week, 4 days ago
Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header

A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could lead to a denial of service, making the system unavailable, or potentially allow for arbitrary code execution, giving the attacker control over the affected system.

Affected products

rhcos
libarchive

Matching in nixpkgs

pkgs.libarchive

Multi-format archive and compression library

Ignored packages (17)

Package maintainers

Patch: https://github.com/libarchive/libarchive/commit/c16162083a247efd4a2bc71401489bec3090ae7c