Lucene search

K
githubexploitC9671703-410D-53CC-A475-F55DD1BF1FA5
HistoryMar 30, 2024 - 5:35 p.m.

Exploit for Embedded Malicious Code in Tukaani Xz

2024-03-3017:35:49
130
malicious code
xz exploit
liblzma modification
kubernetes
docker
cve-2024-3094
vulnerability detection script
vulnerable container testing
sbom
trivy
cloud native application protection platform
falco
security assessment.

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.144

Percentile

95.8%

CVE-2024-3094

Malicious code was discovered in the upstream ta…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.144

Percentile

95.8%