Sicurezza-Informatica-Presentazione

这个仓库包含什么？ 这个仓库包含了对 XZ Utils 安全漏洞的简要研究及展示，适用于 UNIPR 网络安全课程。 CVE-2024-3094 Ubuntu 对该漏洞的描述： 在 xz 的上游 tarball 中发现了恶意代码，从版本 5.6.0 开始。通过一系列复杂的混淆手段，liblzma 构建过程从源代码中一个伪装成测试文件的预构建对象文件中提取数据，进而修改 liblzma 代码中的特定函数。这导致修改后的 liblzma 库可被任何链接该库的软件使用，从而拦截并修改与该库的数据交互。...

xz-utils-vuln-checker

/ / / / | |/// / / / / / / / / / / / / / / //// // / / / / / / / //|| // ,/ / // // // Hare Krishna Rai 0xblurr3d / / / / / / | | / / / / / / / / / \ / / / \ / \ / / / /// / \ / / | |/ / / // / / / / / / //// / / / / // // / / , / / / / |/ ,/ // // // / // // / / //|| / // CVE-2024-3094 +...

CVE-2024-3094

CVE-2024-3094...

CVE-2024-3094

CVE-2024-3094 バージョン5.6.0以降のxzのアップストリームtarballで悪意のあるコードが発見されました。一連の複雑な難読化を経て、liblzmaのビルドプロセスは、ソースコード内に存在する偽装されたテストファイルから事前にビルドされたオブジェクトファイルを抽出し、それがliblzmaコード内の特定の関数を改変するために使用されます。 その結果、修正されたliblzmaライブラリが生成され、このライブラリにリンクされた任意のソフトウェアによって使用され、このライブラリとのデータのやり取りを傍受・改変する可能性があります。このリポジトリには、Kubernetes...

JLSEC-2026-62

Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in...

Injected Malicious Code

XZ is vulnerable to Injected Malicious Code. Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which...

SUSE CVE-2024-3094

Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in...

DEBIAN-CVE-2024-3094

Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in...

ALPINE-CVE-2024-3094

Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in...

UBUNTU-CVE-2024-3094

Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in...

golang: malicious symbol names can lead to code execution at build time

An input validation vulnerability was found in Go. From a generated go file from the cgo tool, it is possible to modify symbols within that object file and specify code. This flaw allows an attacker to create a repository that includes malicious pre-built object files that could execute arbitrary...