7.5
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: има публичен пример за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.
Засегнати продукти
- Red Hat Red Hat Enterprise Linux 10: от 0:3.7.7-10.el10_2 нататък
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: от 0:3.7.7-5.el10_0.1 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:3.5.3-11.el9_8 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:3.5.3-11.el9_8 нататък
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: от 0:3.5.3-5.el9_2.3 нататък
- Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: от 0:3.5.3-5.el9_4.2 нататък
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: от 0:3.5.3-7.el9_6.2 нататък
- Red Hat Red Hat OpenShift Container Platform 4.13: от 413.92.202609080414-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.14: от 414.92.202609011250-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.15: от 415.92.202609140326-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.16: от 416.94.202609140240-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.17: от 417.94.202609191027-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.18: от 418.94.202609031320-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.18: от 418.94.202609171815-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.19: от 4.19.9.6.202609021231-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.20: от 4.20.9.6.202609021029-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.21: от 4.21.9.6.202609021100-0 нататък
- Red Hat Red Hat OpenShift Container Platform 4.22: от 4.22.9.8.202608130832-0 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: от 1791371080 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: от 1791371069 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: от 1791788287 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: от 1791378395 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: от 1791970484 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791459707 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791459711 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791459759 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1789029076 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791966259 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790223279 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790223719 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790272426 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790589998 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790589912 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790589914 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790589855 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790598593 нататък
- Red Hat Red Hat AI Inference Server 3.5: от 1791427182 нататък
- Red Hat Red Hat AI Inference Server 3.5: от 1791818357 нататък
- Red Hat Red Hat Discovery 2: от 1786638573 нататък
- Red Hat Red Hat Discovery 2: от 1788206196 нататък
- Red Hat Red Hat Hardened Images: от 3.8.8-2.hum1 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1790276886 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1790276884 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1790277045 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1790276889 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1790276974 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1790703497 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1790703506 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1790703590 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1790703568 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1790703586 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1790703494 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1790703542 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1786435241 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1786533457 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1786533449 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1786435483 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1786533529 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1787241211 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1787135742 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1787241260 нататък
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 7
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat OpenShift Container Platform 4
- Red Hat Red Hat OpenShift Container Platform 5
Вид слабост
История
- 30 юни 2026 Публикувано
Други уязвимости в Red Hat Red Hat Enterprise Linux 10
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-14164
- https://nvd.nist.gov/vuln/detail/CVE-2026-14164
- https://access.redhat.com/errata/RHSA-2026:30333
- https://access.redhat.com/errata/RHSA-2026:52674
- https://access.redhat.com/errata/RHSA-2026:52675
- https://access.redhat.com/errata/RHSA-2026:54387
- https://access.redhat.com/errata/RHSA-2026:54760
- https://access.redhat.com/errata/RHSA-2026:54769
- https://access.redhat.com/errata/RHSA-2026:56954
- https://access.redhat.com/errata/RHSA-2026:58558
- https://access.redhat.com/errata/RHSA-2026:58573
- https://access.redhat.com/errata/RHSA-2026:58574
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:61783
- https://access.redhat.com/errata/RHSA-2026:62409
- https://access.redhat.com/errata/RHSA-2026:63041
- https://access.redhat.com/errata/RHSA-2026:63044
- https://access.redhat.com/errata/RHSA-2026:63100
- https://access.redhat.com/errata/RHSA-2026:65839
- https://access.redhat.com/errata/RHSA-2026:65851
- https://access.redhat.com/errata/RHSA-2026:67857
- https://access.redhat.com/errata/RHSA-2026:67935
- https://access.redhat.com/errata/RHSA-2026:70586
- https://access.redhat.com/errata/RHSA-2026:70615
- https://access.redhat.com/errata/RHSA-2026:72394
- https://access.redhat.com/errata/RHSA-2026:72395
- https://access.redhat.com/errata/RHSA-2026:72399
- https://access.redhat.com/errata/RHSA-2026:72470
- https://access.redhat.com/errata/RHSA-2026:72475
- https://access.redhat.com/errata/RHSA-2026:72476
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/errata/RHSA-2026:73909
- https://access.redhat.com/errata/RHSA-2026:73959
- https://access.redhat.com/errata/RHSA-2026:73960
- https://access.redhat.com/errata/RHSA-2026:73961
- https://access.redhat.com/errata/RHSA-2026:73962
- https://access.redhat.com/errata/RHSA-2026:74458
- https://access.redhat.com/errata/RHSA-2026:74459
- https://access.redhat.com/errata/RHSA-2026:74460
- https://access.redhat.com/errata/RHSA-2026:74461
- https://access.redhat.com/errata/RHSA-2026:74462
- https://access.redhat.com/errata/RHSA-2026:74463
- https://access.redhat.com/errata/RHSA-2026:74674
- https://access.redhat.com/errata/RHSA-2026:82061
- https://access.redhat.com/errata/RHSA-2026:82304
- https://access.redhat.com/errata/RHSA-2026:82322
- https://access.redhat.com/errata/RHSA-2026:82336
- https://access.redhat.com/errata/RHSA-2026:82347
- https://access.redhat.com/errata/RHSA-2026:82354
- https://access.redhat.com/errata/RHSA-2026:82371
- https://access.redhat.com/errata/RHSA-2026:82372
- https://access.redhat.com/errata/RHSA-2026:82857
- https://access.redhat.com/errata/RHSA-2026:82888
- https://access.redhat.com/security/cve/CVE-2026-14164
- https://bugzilla.redhat.com/show_bug.cgi?id=2493411
- https://github.com/libarchive/libarchive/issues/3069
- https://github.com/libarchive/libarchive/pull/3071