libarchive Vulnerability Allows Denial-of-Service

CERT-Bund has released security advisory WID-SEC-2026-0785 concerning a critical vulnerability (CVSS Base Score 7.5) in the libarchive C library and command-line tool. This vulnerability, exploitable remotely by anonymous attackers, allows for denial-of-service (DoS) attacks. Affected systems include Linux, UNIX, and Windows, with specific mention of Red Hat Enterprise Linux and versions of libarchive prior to 3.8.6.

Organizations utilizing libarchive, particularly those running affected Red Hat Enterprise Linux versions or older open-source libarchive installations, should review and apply available mitigation measures to prevent DoS attacks. The advisory indicates that mitigation is possible, and users are advised to consult further information and version history for specific remediation steps. The temporal score indicates a medium risk as of March 19, 2026.