CVE-2006-5680
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context...
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.
Exploit likelihood
What each source reports
NVD Score used
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.
- Record
CVE-2006-5680- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.
- Record
CVE-2006-5680- Updated
- 2026-11-02
EUVDEUVD-2006-5665 No score
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.
- Record
EUVD-2006-5665- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9qcr-cp56-22qc No score
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context...
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.
- Record
GHSA-9qcr-cp56-22qc- Updated
- 2026-11-02
OSV No score
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.
- Record
CVE-2006-5680- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-5680 No score
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.
- Record
DEBIAN-CVE-2006-5680- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10925-1 No score
bsdtar-3.5.1-1.5 on GA media
These are all security issues fixed in the bsdtar-3.5.1-1.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10925-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libarchiveDebian:12 |
before 1.3.1-1 | 1.3.1-1 |
libarchiveDebian:13 |
before 1.3.1-1 | 1.3.1-1 |
libarchiveDebian:14 |
before 1.3.1-1 | 1.3.1-1 |
bsdtaropenSUSE:Tumbleweed From an advisory covering 12 CVEs |
before 3.5.1-1.5 | 3.5.1-1.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5680 is a medium vulnerability (CVSS 5.0) in Freebsd, published November 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. Fixed in libarchive 1.3.1-1.
References
securitytracker.com/id?1017199
exchange.xforce.ibmcloud.com/vulnerabilities/30137
secunia.com/advisories/22801
security.freebsd.org/advisories/FreeBSD-SA-06:24.libarchive.asc
securityfocus.com/bid/20961
Show 15 moreShow less
nvd.nist.gov/vuln/detail/CVE-2006-5680
github.com/advisories/GHSA-9qcr-cp56-22qc
security-tracker.debian.org/tracker/CVE-2006-5680
suse.com/security/cve/CVE-2006-5680