CVE-2025-5914
HighAdvisory
Published 9 Jun 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.004
- 36th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 244
- of 17,781 indexed, latest versions
- Container images
- 298
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: libarchive security update
Carried by container images the latest versions of 244 of 17,781 indexed charts deploy, on 298 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libarchiverpm | 3.1.2-10.el7_2, 3.3.2-3.el8, 3.3.2-8.el8_1, 3.3.2-9.el8+9 more | 0:3.1.2-14.el7_9.1, 0:3.3.3-6.el8_10, 0:3.5.3-6.el9_6 | 272 |
| libarchivedeb | 3.1.2-11ubuntu0.16.04.3, 3.4.0-2ubuntu1, 3.4.0-2ubuntu1.2, 3.4.0-2ubuntu1.5+7 more | 3.1.2-11ubuntu0.16.04.8+esm2, 3.4.0-2ubuntu1.5+esm1, 3.6.0-1ubuntu1.5, 3.6.2-1+deb12u3+1 more | 26 |
- OSV records
- DEBIAN-CVE-2025-5914RHSA-2025:14130RHSA-2025:14135RHSA-2025:14828RLSA-2025:14130RLSA-2025:14135UBUNTU-CVE-2025-5914
- Also known as
- RHSA-2025:14142, RHSA-2025:14525, RHSA-2025:14528, RHSA-2025:14808, RHSA-2025:14810, RHSA-2025:15024, USN-7601-1, USN-8147-1
Charts affected
244 by stars
Container images carrying it
298 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| cleveritcz/ | c75c1636e0b7 | libarchive | 0:3.5.3-6.el9_6 | 1 |
| cockroachdb/ | 1116820f4134 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| cockroachdb/ | 983312754620 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| coderenvs/ | 1deffc4670e6 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| coderenvs/ | 76fd37fe6830 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| codetogether/ | 4348c8a38752 | libarchive | 0:3.5.3-6.el9_6 | 1 |
| confluentinc/ | f2975d507a2a | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | 8f1544df1f48 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | 3bf359d5e340 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | 83dbca3efd2a | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | adc392d28a1e | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | c0224a1adf7a | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | dc9b972db002 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | 4bc70a83ca6f | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | b0b7aa26254a | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | 8ec46c27982f | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | ee403d5b9090 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | b651d4b6185a | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | 0bec03c1f3ce | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | 5ca5f3269814 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| confluentinc/ | 78c190f4472c | libarchive | 0:3.3.3-6.el8_10 | 1 |
| craftypath/ | 402a0024c732 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| ctron/ | 8fdea8f76499 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| datadog/ | 513a4377aed5 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| datawire/ | f95ae710d75c | libarchive | 0:3.3.3-6.el8_10 | 1 |
| dellemc/ | 148ada9060a9 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| dellemc/ | 660cabd6d929 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| dongjiang1989/ | 4bf9ae391948 | libarchive | 3.4.0-2ubuntu1.5+esm1 | 1 |
| fiware/ | 29456835bb2c | libarchive | 3.4.0-2ubuntu1.5+esm1 | 1 |
| fiware/ | 92a3c5cf43c0 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| fiware/ | efc6793388cc | libarchive | 0:3.3.3-6.el8_10 | 1 |
| fiware/ | 3c490a746f65 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| foundationdb/ | 7d7b6985291e | libarchive | 0:3.5.3-6.el9_6 | 1 |
| gurolakman/ | ed8fd2062548 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| gurolakman/ | 9abb3882bcbd | libarchive | 0:3.3.3-6.el8_10 | 1 |
| gurolakman/ | 6537e8ed8de8 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| gurolakman/ | ce23b20a8a17 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| gurolakman/ | b22e746edd5d | libarchive | 0:3.3.3-6.el8_10 | 1 |
| gurolakman/ | bf18525c5ad9 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| gurolakman/ | 8739565c3ea2 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| hammerspaceinc/ | 395bee4504fc | libarchive | 0:3.5.3-6.el9_6 | 1 |
| haveagitgat/ | 1256348872ce | libarchive | 3.4.0-2ubuntu1.5+esm1 | 1 |
| haveagitgat/ | 1e3f9328327d | libarchive | 3.4.0-2ubuntu1.5+esm1 | 1 |
| haveagitgat/ | 3ff0913202dd | libarchive | 3.4.0-2ubuntu1.5+esm1 | 1 |
| hazelcast/ | f9d34300d330 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| hyperledger/ | c65891b6c237 | libarchive | 3.1.2-11ubuntu0.16.04.8+esm2 | 1 |
| hyperledgerk8s/ | 29a8af8be270 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| hyperledgerk8s/ | 729b3d128487 | libarchive | 0:3.3.3-6.el8_10 | 1 |
| hyperledgerk8s/ | ed0b0c56f1ea | libarchive | 0:3.3.3-6.el8_10 | 1 |
| ibmcom/ | 240ff499eb5b | libarchive | 0:3.1.2-14.el7_9.1 | 1 |