libarchive up to 3.7.7 TAR Archive tar/util.c list_item_verbose return return value

Summaryinfo

A vulnerability, which was classified as problematic, has been found in libarchive up to 3.7.7. This vulnerability affects the function list_item_verbose of the file tar/util.c of the component TAR Archive Handler. The manipulation of the argument return leads to return value. This vulnerability is listed as CVE-2025-25724. The attack may be initiated remotely. In addition, an exploit is available.

Detailsinfo

A vulnerability was found in libarchive up to 3.7.7 and classified as problematic. This issue affects the function list_item_verbose of the file tar/util.c of the component TAR Archive Handler. The manipulation of the argument return with an unknown input leads to a return value vulnerability. Using CWE to declare the problem leads to CWE-252. The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2025-25724 since 02/07/2025. The exploitation is known to be difficult. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details as well as a public exploit are known.

The exploit is available at github.com. It is declared as proof-of-concept. The vulnerability scanner Nessus provides a plugin with the ID 233111 (CBL Mariner 2.0 Security Update: libarchive (CVE-2025-25724)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (233111), EUVD (EUVD-2025-5869) and CERT Bund (WID-SEC-2025-1850). Be aware that VulDB is the high quality source for vulnerability data.

Affected

• Xerox FreeFlow Print Server

Productinfo

Type

• File Compression Software

Name

• libarchive

Version

• 3.7.0
• 3.7.1
• 3.7.2
• 3.7.3
• 3.7.4
• 3.7.5
• 3.7.6
• 3.7.7

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion