{"id":"EUVD-2025-33711","enisaUuid":"b30b895b-37e0-3d84-aacb-299a8e4b68b2","description":"github.com/nwaples/rardecode versions \u003c\u003d2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash.","datePublished":"Oct 10, 2025, 11:15:15 AM","dateUpdated":"Dec 2, 2025, 9:30:03 AM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/nwaples/rardecode/commit/52fb4e825c936636f251f7e7deded39ab11df9a9\n","aliases":"CVE-2025-11579\nGHSA-rwvp-r38j-9rgg\n","assigner":"Mattermost","epss":0.37,"enisaIdProduct":[{"id":"c5859152-3c70-366d-9bae-ea9ffe9f0281","product":{"name":"rardecode","vendor":{"name":"nwaples"}},"product_version":"2.0.1 ≤2.1.1"}],"enisaIdVendor":[{"id":"b0f0cd1d-6bb2-3748-9eb1-1c56c48f8493","vendor":{"name":"nwaples"}}],"enisaIdVulnerability":[{"id":"3c28edce-cf52-3c4a-ab60-e397b785fa84","vulnerability":{"id":"GHSA-rwvp-r38j-9rgg","description":"rardecode: DoS risk due to unrestricted RAR dictionary sizes","datePublished":"Oct 10, 2025, 12:30:57 PM","dateUpdated":"Dec 11, 2025, 7:44:54 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-11579\nhttps://github.com/nwaples/rardecode/commit/52fb4e825c936636f251f7e7deded39ab11df9a9\nhttps://github.com/nwaples/rardecode\nhttps://pkg.go.dev/vuln/GO-2025-4020\n","enisa_id":"EUVD-2025-33711\n","aliases":"GHSA-rwvp-r38j-9rgg\nCVE-2025-11579\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:55:38 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"88e6240a-17e8-34d2-999b-91e096b0ea17","vulnerability":{"id":"CVE-2025-11579","description":"github.com/nwaples/rardecode versions \u003c\u003d2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash.","datePublished":"Oct 10, 2025, 11:15:15 AM","dateUpdated":"Dec 2, 2025, 9:30:03 AM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/nwaples/rardecode/commit/52fb4e825c936636f251f7e7deded39ab11df9a9\n","enisa_id":"EUVD-2025-33711\n","assigner":"Mattermost","epss":0.37,"dataProcessed":"Nov 6, 2026, 7:17:15 AM","vulnerabilityProduct":[{"id":"b1050e2c-cd2d-3e15-a1c0-8675559a04b2","product":{"name":"rardecode","vendor":{"name":"nwaples"}},"product_version":"2.0.1 ≤2.1.1"}],"vulnerabilityVendor":[{"id":"9a494806-be1f-322b-a228-2e801d0d5796","vendor":{"name":"nwaples"}}]}}],"enisaIdAdvisory":[{"id":"5450d266-ad28-3d43-bfb8-bd465a0ec1fd","advisory":{"id":"openSUSE-SU-2026:10844-1","description":"jfrog-cli-2.104.1-1.1 on GA media","summary":"jfrog-cli-2.104.1-1.1 on GA media","datePublished":"May 23, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 5:06:17 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10844-1.json\nhttps://www.suse.com/security/cve/CVE-2025-11579/\n","aliases":"CVE-2025-11579\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"090ec689-1d3f-3b34-b862-58e023bc237c","product":{"name":"jfrog-cli-bash-completion-0:2.104.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"0ee05d31-d2be-363f-ae66-c81efe4927bc","product":{"name":"jfrog-cli-0:2.104.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"121757a8-4398-3dd0-bde5-18917140b31e","product":{"name":"jfrog-cli-fish-completion-0:2.104.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"13679aea-fbcd-3d56-95b3-7063b582e623","product":{"name":"jfrog-cli-bash-completion-0:2.104.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"24ec28fe-a65b-3f98-b95c-4ca1124f359e","product":{"name":"jfrog-cli-bash-completion-0:2.104.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"29147d1e-47f0-30ae-99d5-1bbae409d255","product":{"name":"jfrog-cli-fish-completion-0:2.104.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"320a24c8-0fd9-381c-9cf7-b29d4abc46c3","product":{"name":"jfrog-cli-0:2.104.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5bc5707e-5e9c-3ea2-9361-4f0a4db4683b","product":{"name":"jfrog-cli-zsh-completion-0:2.104.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5bc850f4-136f-342a-92b1-84b74cc2a685","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"64e4e0cb-58f2-36a0-894b-1e7575841317","product":{"name":"jfrog-cli-zsh-completion-0:2.104.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"79a17bb1-bf17-3002-b8f2-8a7a0cf5d28d","product":{"name":"jfrog-cli-fish-completion-0:2.104.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7a1c5ede-8b32-3857-b48c-744e2594c504","product":{"name":"jfrog-cli-zsh-completion-0:2.104.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a39f3ca0-f121-33cb-a437-2ca05c9b7445","product":{"name":"jfrog-cli-0:2.104.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d51319c2-329e-3c72-9d96-fa65e071d11b","product":{"name":"jfrog-cli-0:2.104.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"dce14224-a8cc-39ba-987b-f8fcb60ad0a8","product":{"name":"jfrog-cli-fish-completion-0:2.104.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e8e9d1df-19c7-3ae8-82ea-ea987b810c74","product":{"name":"jfrog-cli-bash-completion-0:2.104.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"fa841580-5f0d-3713-bc72-9f107bca53cc","product":{"name":"jfrog-cli-zsh-completion-0:2.104.1-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"5b578c52-4106-30bb-9a8c-c005a375076a","advisory":{"id":"openSUSE-SU-2025:15710-1","description":"govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media","summary":"govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media","datePublished":"Nov 7, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:44:36 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15710-1.json\nhttps://www.suse.com/security/cve/CVE-2016-11063/\nhttps://www.suse.com/security/cve/CVE-2016-11066/\nhttps://www.suse.com/security/cve/CVE-2016-11067/\nhttps://www.suse.com/security/cve/CVE-2016-11068/\nhttps://www.suse.com/security/cve/CVE-2016-11069/\nhttps://www.suse.com/security/cve/CVE-2016-11070/\nhttps://www.suse.com/security/cve/CVE-2016-11071/\nhttps://www.suse.com/security/cve/CVE-2016-11072/\nhttps://www.suse.com/security/cve/CVE-2016-11073/\nhttps://www.suse.com/security/cve/CVE-2016-11074/\nhttps://www.suse.com/security/cve/CVE-2016-11075/\nhttps://www.suse.com/security/cve/CVE-2016-11076/\nhttps://www.suse.com/security/cve/CVE-2016-11077/\nhttps://www.suse.com/security/cve/CVE-2016-11078/\nhttps://www.suse.com/security/cve/CVE-2016-11079/\nhttps://www.suse.com/security/cve/CVE-2016-11080/\nhttps://www.suse.com/security/cve/CVE-2016-11081/\nhttps://www.suse.com/security/cve/CVE-2016-11082/\nhttps://www.suse.com/security/cve/CVE-2016-11083/\nhttps://www.suse.com/security/cve/CVE-2016-11084/\nhttps://www.suse.com/security/cve/CVE-2017-18872/\nhttps://www.suse.com/security/cve/CVE-2023-32199/\nhttps://www.suse.com/security/cve/CVE-2024-58269/\nhttps://www.suse.com/security/cve/CVE-2025-10545/\nhttps://www.suse.com/security/cve/CVE-2025-10678/\nhttps://www.suse.com/security/cve/CVE-2025-10954/\nhttps://www.suse.com/security/cve/CVE-2025-11374/\nhttps://www.suse.com/security/cve/CVE-2025-11375/\nhttps://www.suse.com/security/cve/CVE-2025-11579/\nhttps://www.suse.com/security/cve/CVE-2025-11621/\nhttps://www.suse.com/security/cve/CVE-2025-12044/\nhttps://www.suse.com/security/cve/CVE-2025-26625/\nhttps://www.suse.com/security/cve/CVE-2025-27093/\nhttps://www.suse.com/security/cve/CVE-2025-41410/\nhttps://www.suse.com/security/cve/CVE-2025-41443/\nhttps://www.suse.com/security/cve/CVE-2025-54286/\nhttps://www.suse.com/security/cve/CVE-2025-54287/\nhttps://www.suse.com/security/cve/CVE-2025-54288/\nhttps://www.suse.com/security/cve/CVE-2025-54289/\nhttps://www.suse.com/security/cve/CVE-2025-54290/\nhttps://www.suse.com/security/cve/CVE-2025-54291/\nhttps://www.suse.com/security/cve/CVE-2025-54293/\nhttps://www.suse.com/security/cve/CVE-2025-54469/\nhttps://www.suse.com/security/cve/CVE-2025-54470/\nhttps://www.suse.com/security/cve/CVE-2025-54471/\nhttps://www.suse.com/security/cve/CVE-2025-54499/\nhttps://www.suse.com/security/cve/CVE-2025-58073/\nhttps://www.suse.com/security/cve/CVE-2025-58075/\nhttps://www.suse.com/security/cve/CVE-2025-58356/\nhttps://www.suse.com/security/cve/CVE-2025-59043/\nhttps://www.suse.com/security/cve/CVE-2025-59048/\nhttps://www.suse.com/security/cve/CVE-2025-59530/\nhttps://www.suse.com/security/cve/CVE-2025-59836/\nhttps://www.suse.com/security/cve/CVE-2025-59937/\nhttps://www.suse.com/security/cve/CVE-2025-61141/\nhttps://www.suse.com/security/cve/CVE-2025-61524/\nhttps://www.suse.com/security/cve/CVE-2025-61581/\nhttps://www.suse.com/security/cve/CVE-2025-61688/\nhttps://www.suse.com/security/cve/CVE-2025-62156/\nhttps://www.suse.com/security/cve/CVE-2025-62157/\nhttps://www.suse.com/security/cve/CVE-2025-62375/\nhttps://www.suse.com/security/cve/CVE-2025-62506/\nhttps://www.suse.com/security/cve/CVE-2025-62513/\nhttps://www.suse.com/security/cve/CVE-2025-62705/\nhttps://www.suse.com/security/cve/CVE-2025-62714/\nhttps://www.suse.com/security/cve/CVE-2025-62725/\nhttps://www.suse.com/security/cve/CVE-2025-62820/\nhttps://www.suse.com/security/cve/CVE-2025-64101/\nhttps://www.suse.com/security/cve/CVE-2025-64102/\nhttps://www.suse.com/security/cve/CVE-2025-64103/\n","aliases":"CVE-2016-11063\nCVE-2016-11066\nCVE-2016-11067\nCVE-2016-11068\nCVE-2016-11069\nCVE-2016-11070\nCVE-2016-11071\nCVE-2016-11072\nCVE-2016-11073\nCVE-2016-11074\nCVE-2016-11075\nCVE-2016-11076\nCVE-2016-11077\nCVE-2016-11078\nCVE-2016-11079\nCVE-2016-11080\nCVE-2016-11081\nCVE-2016-11082\nCVE-2016-11083\nCVE-2016-11084\nCVE-2017-18872\nCVE-2023-32199\nCVE-2024-58269\nCVE-2025-10545\nCVE-2025-10678\nCVE-2025-10954\nCVE-2025-11374\nCVE-2025-11375\nCVE-2025-11579\nCVE-2025-11621\nCVE-2025-12044\nCVE-2025-26625\nCVE-2025-27093\nCVE-2025-41410\nCVE-2025-41443\nCVE-2025-54286\nCVE-2025-54287\nCVE-2025-54288\nCVE-2025-54289\nCVE-2025-54290\nCVE-2025-54291\nCVE-2025-54293\nCVE-2025-54469\nCVE-2025-54470\nCVE-2025-54471\nCVE-2025-54499\nCVE-2025-58073\nCVE-2025-58075\nCVE-2025-58356\nCVE-2025-59043\nCVE-2025-59048\nCVE-2025-59530\nCVE-2025-59836\nCVE-2025-59937\nCVE-2025-61141\nCVE-2025-61524\nCVE-2025-61581\nCVE-2025-61688\nCVE-2025-62156\nCVE-2025-62157\nCVE-2025-62375\nCVE-2025-62506\nCVE-2025-62513\nCVE-2025-62705\nCVE-2025-62714\nCVE-2025-62725\nCVE-2025-62820\nCVE-2025-64101\nCVE-2025-64102\nCVE-2025-64103\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"1a23be4f-881a-3b69-af30-f47e7bd822db","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2ed33f7b-f8d3-3670-bc12-20339a40cad4","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3ff168c0-43f0-3e6a-a46b-90f0b9322304","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"6b082ef7-48e6-329d-a108-2122d2ee3fe7","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"6df9e33c-98f3-3e85-bd98-4153a1025f74","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"70fcae35-efbf-33bd-b653-2c72a0a85d73","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"73a13c93-e86b-3658-97c0-52e119937024","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"dc8dabed-45c9-3497-b3f5-b41e45657724","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"eb1e91f2-e5cf-3808-8f1f-c394962ed62d","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"aa842b6f-f642-33cb-9646-b90a2d53baa6","advisory":{"id":"openSUSE-SU-2025:15722-1","description":"hauler-1.3.1-1.1 on GA media","summary":"hauler-1.3.1-1.1 on GA media","datePublished":"Nov 10, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:44:49 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15722-1.json\nhttps://www.suse.com/security/cve/CVE-2025-11579/\nhttps://www.suse.com/security/cve/CVE-2025-47911/\nhttps://www.suse.com/security/cve/CVE-2025-58058/\n","aliases":"CVE-2025-11579\nCVE-2025-47911\nCVE-2025-58058\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"002ccb5f-eb67-306f-b10f-c63dc162e1fb","product":{"name":"hauler-0:1.3.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"21cf3b9d-534d-3d87-bbad-18683746eb36","product":{"name":"hauler-1.3.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5dd96ca3-83f3-3ad6-9bc1-078c10aca95e","product":{"name":"hauler-0:1.3.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"695858e8-700a-3689-b417-6017fdc1436a","product":{"name":"hauler-1.3.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a2be8ab2-fc0d-379c-bf6e-8b2521105f21","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"b2f0564b-115d-3b34-9fce-1bdbb9d097bf","product":{"name":"hauler-0:1.3.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b3775367-5e6d-35ee-965a-9c9e563f0879","product":{"name":"hauler-1.3.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e913277e-10c6-32eb-95a3-56e89883318c","product":{"name":"hauler-0:1.3.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"ec8f7997-b7b0-33d5-a59e-67d03639a583","product":{"name":"hauler-1.3.1-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"e77e74ef-632c-37d5-ba10-1b74fff9fda5","advisory":{"id":"openSUSE-SU-2025:20160-1","description":"Security update for hauler","summary":"Security update for hauler","datePublished":"Dec 12, 2025, 1:20:11 PM","dateUpdated":"Sep 20, 2026, 9:48:30 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_20160-1.json\nhttps://bugzilla.suse.com/1235332\nhttps://bugzilla.suse.com/1241184\nhttps://bugzilla.suse.com/1241804\nhttps://bugzilla.suse.com/1246722\nhttps://bugzilla.suse.com/1248937\nhttps://bugzilla.suse.com/1251516\nhttps://bugzilla.suse.com/1251651\nhttps://bugzilla.suse.com/1251891\nhttps://www.suse.com/security/cve/CVE-2024-0406/\nhttps://www.suse.com/security/cve/CVE-2024-45338/\nhttps://www.suse.com/security/cve/CVE-2025-11579/\nhttps://www.suse.com/security/cve/CVE-2025-22872/\nhttps://www.suse.com/security/cve/CVE-2025-46569/\nhttps://www.suse.com/security/cve/CVE-2025-47911/\nhttps://www.suse.com/security/cve/CVE-2025-58058/\nhttps://www.suse.com/security/cve/CVE-2025-58190/\n","aliases":"CVE-2024-0406\nCVE-2024-45338\nCVE-2025-11579\nCVE-2025-22872\nCVE-2025-46569\nCVE-2025-47911\nCVE-2025-58058\nCVE-2025-58190\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"2e5b5998-057d-3e34-be36-e6d21608f46f","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"3d196cdc-8c2b-31fa-a7f7-c44d58bc2d8e","product":{"name":"hauler-0:1.3.1-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"485e4ed5-1ad2-31c3-a1a0-19de40d3a9ec","product":{"name":"hauler-1.3.1-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"932ffd9b-590d-3cbf-935e-9d7c2b2746d0","product":{"name":"hauler-0:1.3.1-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c01ce6db-613e-382f-9794-d1871b3f3c3b","product":{"name":"hauler-1.3.1-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}}]}}]}