目标达成感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%

请我们喝杯咖啡

CVE-2026-14164— libarchive 资源管理错误漏洞

一分钟漏洞结论

影响对象

Red Hat Red Hat Enterprise Linux 10

利用判断

存在公开或 AI PoC，应优先验证

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

libarchive是libarchive团队开源的一款多格式存档和压缩库。 libarchive存在资源管理错误漏洞，该漏洞源于RAR5解析器中的双重释放问题，在解析特制RAR5存档时，filtered_buf指针在解压状态重新初始化释放后可能未重置，后续处理另一个归档条目时可能导致同一内存区域被二次释放，成功利用可能导致使用易受攻击的libarchive API的应用程序意外终止，导致拒绝服务。

CVSS 7.5 · High EPSS 0.73% · P53 更新于 2026-10-02

可能的 ATT&CK 技术 1 AI

T1203 · Exploitation for Client Execution

影响版本矩阵 44

厂商	产品	版本范围	状态
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790223279< *`	unaffected
		`1790223719< *`	unaffected
		`1790272426< *`	unaffected
		`1790589998< *`	unaffected
		`1790589912< *`	unaffected
		`1790589914< *`	unaffected
		`1790589855< *`	unaffected
		`1790598593< *`	unaffected
Red Hat	Red Hat Discovery 2	`1786638573< *`	unaffected
		`1788206196< *`	unaffected
Red Hat	Red Hat Enterprise Linux 10	`0:3.7.7-10.el10_2< *`	unaffected
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	`0:3.7.7-5.el10_0.1< *`	unaffected
Red Hat	Red Hat Enterprise Linux 6	`全部`	unaffected
Red Hat	Red Hat Enterprise Linux 7	`全部`	unaffected
Red Hat	Red Hat Enterprise Linux 8	`全部`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:3.5.3-11.el9_8< *`	unaffected
		`0:3.5.3-11.el9_8< *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	`0:3.5.3-5.el9_2.3< *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	`0:3.5.3-5.el9_4.2< *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	`0:3.5.3-7.el9_6.2< *`	unaffected
Red Hat	Red Hat Hardened Images	`3.8.8-2.hum1< *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790276886< *`	unaffected
		`1790276884< *`	unaffected
		`1790277045< *`	unaffected
		`1790276889< *`	unaffected
		`1790276974< *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4	`全部`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.13	`413.92.202609080414-0< *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.14	`414.92.202609011250-0< *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.15	`415.92.202609140326-0< *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.16	`416.94.202609140240-0< *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.18	`418.94.202609031320-0< *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.19	`4.19.9.6.202609021231-0< *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.20	`4.20.9.6.202609021029-0< *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.21	`4.21.9.6.202609021100-0< *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.22	`4.22.9.8.202608130832-0< *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1786435241< *`	unaffected
		`1786533457< *`	unaffected
		`1786533449< *`	unaffected
		`1786435483< *`	unaffected
		`1786533529< *`	unaffected
		`1787241211< *`	unaffected
		`1787135742< *`	unaffected
		`1787241260< *`	unaffected

获取后续新漏洞提醒登录后订阅

一、漏洞 CVE-2026-14164 基础信息

漏洞信息

对漏洞内容有疑问？看看神龙的深度分析是否有帮助！

查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

来源: CVE Program / CVE List V5

Vulnerability Description

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.

来源: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

来源: CVE Program / CVE List V5

Vulnerability Type

双重释放

来源: CVE Program / CVE List V5

Vulnerability Title

libarchive 资源管理错误漏洞

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Description

来源: 中国国家信息安全漏洞库 CNNVD

CVSS Information

N/A

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Type

N/A

来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商	产品	影响版本	CPE
Red Hat	Red Hat Enterprise Linux 10	0:3.7.7-10.el10_2 ~ *	`cpe:/o:redhat:enterprise_linux:10.2`
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	0:3.7.7-5.el10_0.1 ~ *	`cpe:/o:redhat:enterprise_linux_eus:10.0`
Red Hat	Red Hat Enterprise Linux 9	0:3.5.3-11.el9_8 ~ *	`cpe:/a:redhat:enterprise_linux:9::appstream`
Red Hat	Red Hat Enterprise Linux 9	0:3.5.3-11.el9_8 ~ *	`cpe:/a:redhat:enterprise_linux:9::appstream`
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	0:3.5.3-5.el9_2.3 ~ *	`cpe:/a:redhat:rhel_e4s:9.2::appstream`
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	0:3.5.3-5.el9_4.2 ~ *	`cpe:/a:redhat:rhel_e4s:9.4::appstream`
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	0:3.5.3-7.el9_6.2 ~ *	`cpe:/a:redhat:rhel_eus:9.6::appstream`
Red Hat	Red Hat OpenShift Container Platform 4.13	413.92.202609080414-0 ~ *	`cpe:/a:redhat:openshift:4.13::el9`
Red Hat	Red Hat OpenShift Container Platform 4.14	414.92.202609011250-0 ~ *	`cpe:/a:redhat:openshift:4.14::el9`
Red Hat	Red Hat OpenShift Container Platform 4.15	415.92.202609140326-0 ~ *	`cpe:/a:redhat:openshift:4.15::el9`
Red Hat	Red Hat OpenShift Container Platform 4.16	416.94.202609140240-0 ~ *	`cpe:/a:redhat:openshift:4.16::el9`
Red Hat	Red Hat OpenShift Container Platform 4.17	417.94.202609191027-0 ~ *	`cpe:/a:redhat:openshift:4.17::el9`
Red Hat	Red Hat OpenShift Container Platform 4.18	418.94.202609031320-0 ~ *	`cpe:/a:redhat:openshift:4.18::el9`
Red Hat	Red Hat OpenShift Container Platform 4.18	418.94.202609171815-0 ~ *	`cpe:/a:redhat:openshift:4.18::el9`
Red Hat	Red Hat OpenShift Container Platform 4.19	4.19.9.6.202609021231-0 ~ *	`cpe:/a:redhat:openshift:4.19::el9`
Red Hat	Red Hat OpenShift Container Platform 4.20	4.20.9.6.202609021029-0 ~ *	`cpe:/a:redhat:openshift:4.20::el9`
Red Hat	Red Hat OpenShift Container Platform 4.21	4.21.9.6.202609021100-0 ~ *	`cpe:/a:redhat:openshift:4.21::el9`
Red Hat	Red Hat OpenShift Container Platform 4.22	4.22.9.8.202608130832-0 ~ *	`cpe:/a:redhat:openshift:4.22::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790223279 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790223719 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790272426 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790589998 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790589912 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790589914 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790589855 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	1790598593 ~ *	`cpe:/a:redhat:cert_manager:1.20::el9`
Red Hat	Red Hat Discovery 2	1786638573 ~ *	`cpe:/a:redhat:discovery:2::el9`
Red Hat	Red Hat Discovery 2	1788206196 ~ *	`cpe:/a:redhat:discovery:2::el9`
Red Hat	Red Hat Hardened Images	3.8.8-2.hum1 ~ *	`cpe:/a:redhat:hummingbird:1`
Red Hat	Red Hat OpenShift AI 3.0	1790276886 ~ *	`cpe:/a:redhat:openshift_ai:3.0::el9`

二、漏洞 CVE-2026-14164 的公开POC

#	POC 描述	源链接	神龙链接

AI 生成 POC 高级

Qwen3.6-35B-A3B · 8425 chars

Pro+ 专属包含：

漏洞复现靶场录像（真实沙箱构建 + 触发，独家）

漏洞原理深度分析

触发条件与影响面

完整可执行 POC 代码

利用链与缓解建议

POC 打包下载

每月 100+ 条 AI 生成额度

升级 Pro+ 解锁限时 ¥499/月 ¥599 先注册

三、漏洞 CVE-2026-14164 的情报信息

请登录查看更多情报信息。

CVE-2026-14164 补丁与修复 (2)

CVE-2026-14164 厂商安全公告 (41)

🔗 2493411 – (CVE-2026-14164) CVE-2026-14164 libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack() 查看完整文章 issue-tracking x_refsource_REDHAT
🔗 RHSA-2026:65839 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:70586 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:54769 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72476 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:73909 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:54387 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:58981 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:67857 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72395 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:73961 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72399 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:65851 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:70615 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74463 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:58558 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:63041 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:63044 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74458 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72475 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:52675 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:54760 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:62409 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72470 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:61783 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:56954 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72394 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:67935 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:63100 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:73962 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74460 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:72502 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:73959 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:30333 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:73960 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:58573 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74459 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:52674 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74461 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:58574 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:74462 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT

CVE-2026-14164 其他参考 (1)

https://access.redhat.com/errata/RHSA-2026:74674 vendor-advisory x_refsource_REDHAT

https://www.cve.org/CVERecord?id=CVE-2026-14164

同批安全公告 · Red Hat · 2026-06-30 · 共 6 条

CVE-2026-12388	6.5 MEDIUM	Keycloak 权限许可和访问控制问题漏洞
CVE-2026-4629	6.5 MEDIUM	Keycloak 权限许可和访问控制问题漏洞
CVE-2026-12610	6.4 MEDIUM	Red Hat System Security Services Daemon 资源管理错误漏洞
CVE-2026-13316	4.4 MEDIUM	Foreman 服务端请求伪造漏洞
CVE-2026-14209	4.3 MEDIUM	Keycloak 授权问题漏洞

IV. Related Vulnerabilities

Same product: Red Hat Enterprise Linux 10

Same vendor: Red Hat

Same weakness: CWE-415

V. Comments for CVE-2026-14164

暂无评论

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

CVE-2026-14164— libarchive 资源管理错误漏洞

一分钟漏洞结论

可能的 ATT&CK 技术 1 AI

影响版本矩阵 44

一、 漏洞 CVE-2026-14164 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2026-14164 的公开POC

三、漏洞 CVE-2026-14164 的情报信息

CVE-2026-14164 补丁与修复 (2)

CVE-2026-14164 厂商安全公告 (41)

CVE-2026-14164 其他参考 (1)

同批安全公告 · Red Hat · 2026-06-30 · 共 6 条

IV. Related Vulnerabilities

V. Comments for CVE-2026-14164

发表评论

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

一、漏洞 CVE-2026-14164 基础信息