VULNERABILITY INTELLIGENCE

CVE-2006-5680

CVSS score5 MEDIUM
EPSS probability1.59%
CISA KEVNot currently listed
Published2006-11-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.

Primary references