Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

CVE-2026-4111

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

HIGH 7.5

At a glance

Source
NVD
EPSS
EPSS 0.70 % · percentile 53 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Awaiting Analysis

Description

A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.

Weaknesses (CWE)

  • CWE-835 — Loop with Unreachable Exit Condition

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hredhat
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hredhat-SADP
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · secalert@redhat.com (Secondary)
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c (Secondary)

European references

CERT-FR advisories

Affected products

ProductVersions
Red Hat · Red Hat Enterprise Linux 10unaffected 0:3.7.7-5.el10_1 < *
Red Hat · Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:3.7.7-5.el10_0 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 0:3.5.3-7.el9_7 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 0:3.5.3-7.el9_7 < *
Red Hat · Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:3.5.3-2.el9_0.3 < *
Red Hat · Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:3.5.3-5.el9_2.1 < *
Red Hat · Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:3.5.3-4.el9_4.2 < *
Red Hat · Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:3.5.3-6.el9_6.1 < *
Red Hat · Red Hat OpenShift Container Platform 4.13unaffected 413.92.202604080111-0 < *
Red Hat · Red Hat OpenShift Container Platform 4.14unaffected 414.92.202605060243-0 < *
Red Hat · Red Hat OpenShift Container Platform 4.15unaffected 415.92.202605060220-0 < *
Red Hat · Red Hat OpenShift Container Platform 4.16unaffected 416.94.202604211449-0 < *
Red Hat · Red Hat OpenShift Container Platform 4.17unaffected 417.94.202605112123-0 < *
Red Hat · Red Hat OpenShift Container Platform 4.18unaffected 418.94.202604140044-0 < *
Red Hat · Red Hat OpenShift Container Platform 4.19unaffected 4.19.9.6.202604211219-0 < *
Red Hat · Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459707 < *
Red Hat · Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459711 < *
Red Hat · Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459759 < *
Red Hat · Cert Manager support for Red Hat OpenShift release 1.18unaffected 1789029076 < *
Red Hat · Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791966259 < *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD