683 matches found
Kaspersky_CVE-2024-3094
Security Review: CVE-2024-3094 XZ Utils Backdoor 저자: Сушин Иван 날짜: 2026년 3월 1. 프로젝트 설명 이 저장소는 CVE-2024-3094XZ Utils 라이브러리의 공급망 공격 취약점에 대한 전체 보안 검토 결과를 포함합니다. 작업 목표: 위협 모델링Threat Modeling 수행 코드의 정적 및 동적 분석 수행 자동화 테스트 패키지 개발 위험 최소화를 위한 권장 사항 준비 산출물: 파일| 설명 ---|--- docs/ThreatModel.md| STRIDE 위협 모델...
CVE-2024-3094-analysis
CVE-2024-3094 – Реальная угроза цепочки поставок Что такое CVE-2024-3094? CVE-2024-3094 — это критическая уязвимость типа backdoor бэкдор, обнаруженная в библиотеке сжатия xz. Она позволяет злоумышленникам потенциально удаленно выполнять код через SSH. Уязвимость была внедрена намеренно и...
sec_review_cve-2024-3094
Был проведен полный security review уязвимости CVE-2024-3094 с открытым исходным кодом. На основании полученных данных подготовлены: 1. Отчёт «ThreatModel + SecurityReview» – детальное описание угроз, пути эксплуатации, оценка риска и рекомендации по уменьшению поверхности атаки. 2. Пакет...
cve-2024-3094
🛡️ 사이버보안 프로젝트: liblzma의 XZ 백도어 분석 📄 개요 이 프로젝트는 xz-utils liblzma 에서 발견된 주목할 만한 백도어를 분석하며, 5.6.0 및 5.6.1 버전에 영향을 미칩니다. 업스트림 빌드 시스템에 삽입된 악성 코드는 런타임 시 sshd가 LZMA 압축 라이브러리와 상호작용하는 방식을 수정하여 SSH 인증을 표적으로 삼았습니다. ⚠️ 이 프로젝트는 교육 및 방어 연구 목적으로만 사용됩니다. 취약 머신 이 저장소를 클론합니다 git clone...
CVE-2024-3094
🚨 CVE-2024-3094 — Бэкдор в XZ Utils 🧠 Обзор CVE-2024-3094 — это критическая компрометация цепочки поставок, затрагивающая широко используемую библиотеку сжатия XZ Utils. Злоумышленник внедрил скрытый бэкдор в upstream-релизы, позволяющий удаленное выполнение кода RCE через подделанную liblzma. ⚠️...
CVE-2024-3094
CVE-2024-3094 CVE-2024-3094 실습 환경 구축 및 보고 CVE-2024-3094 실습 XZ Utils 5.6.0 및 5.6.1에 삽입된 백도어를 실습 환경에서 재현하여, SSH 인증 후킹 여부 및 위험성을 분석하였습니다. 환경 Host OS : - Windows 11 Docker : Docker Desktop 28.0.1 Dockerfile Base Image : debian:experimental-20240311 liblzama5 version : 5.6.0 SSH Port : 2222 root / pw ...
CVE-2024-3094
CVE-2024-3094 Я перенёс свои заметки в Obsidian в отдельное хранилище и этот репозиторий GitHub, чтобы иметь возможность делиться им. Начальная страница — CVE-2024-3094 xz цепочка поставок. Установка Клонируйте репозиторий с помощью git. git clone https://github.com/reuteras/CVE-2024-3094.git Зат...
Rocky Linux 10.0 [CIQ] Security Update: xz / xz-debuginfo / xz-debugsource / xz-devel / xz-libs / etc (crlsa-2025_7524)
The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257524 advisory. xz: XZ has a heap-use-after-free bug in threaded .xz decoder CVE-2025-31115 Tenable has extracted the preceding description block directly from the CIQ security...
AlmaLinux 9.2 [TuxCare] Security Update: xz / xz-devel / xz-libs / xz-lzma-compat / xz-static (ALMALINUX9.2:CLSA-2026:1779894244)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779894244 advisory. - XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used t...
Rocky Linux 10.2 [CIQ] Security Update: xz / xz-debuginfo / xz-debugsource / xz-devel / xz-libs / etc (crlsa-2026_64787)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202664787 advisory. xz: XZ Utils: Denial of Service via buffer overflow in index decoding CVE-2026-34743 Tenable has extracted the preceding description block directly from the CIQ...
CLEANSTART-2025-NL28578 Malicious code was discovered in the upstream tarballs of xz, starting with version 5
Security vulnerability affects the xz package. Malicious code was discovered in the upstream tarballs of xz, starting with version 5...
CLEANSTART-2025-BC18774 arbitrary file write vulnerability was found in GNU gzip's zgrep utility
Security vulnerability affects the xz package. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility...
Rocky Linux 9.6 [TuxCare] Security Update: xz / xz-devel / xz-libs / xz-lzma-compat / xz-static (ALMALINUX9.6:CLSA-2026:1780518704)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780518704 advisory. - XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used...
AlmaLinux 9.6 [TuxCare] Security Update: xz / xz-devel / xz-libs / xz-lzma-compat / xz-static (ALMALINUX9.6:CLSA-2026:1780518704)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780518704 advisory. - XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used t...
ROS-20260922-73-0131
The vulnerability of the lzmaindexAppend function in the XZ Utils data compression package is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260921-73-0001
The vulnerability of the MixCoderCode function in the XZ Decoder component of the 7-Zip archive processor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
EulerOS Virtualization 2.11.0 : xz (EulerOS-SA-2026-3570)
According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...
EulerOS Virtualization 2.11.1 : xz (EulerOS-SA-2026-3482)
According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...
[SECURITY] [DLA 4783-1] xz-utils security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4783-1 [email protected] https://www.debian.org/lts/security/ Otto Kekäläinen September 17, 2026 https://wiki.debian.org/LTS -...
