Lucene search
Wiz BlogWIZBLOG:BABAEABBA55C1AF14806159B284EF03EHistoryMar 29, 2024 - 10:02 p.m.
Backdoor in XZ Utils allows RCE: everything you need to know
2024-03-2922:02:58
Wiz Blog
www.wiz.io
84
xz utils
rce
cve-2024-3094
supply chain compromise
patch urgency
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
7 High
AI Score
Confidence
Low
0.133 Low
EPSS
Percentile
95.6%
Detect and mitigate CVE-2024-3094, a critical supply chain compromise, affecting XZ Utils Data compression library. Organizations should patch urgently.
Related
githubexploit
githubexploit
Exploit for Embedded Malicious Code in Tukaani Xz
2024-03-29 23:21:44
Exploit for Embedded Malicious Code in Tukaani Xz
2024-03-30 17:35:49
Exploit for Embedded Malicious Code in Tukaani Xz
2024-03-29 23:36:07
veracode
veracode
Injected Malicious Code
2024-04-01 21:18:10
attackerkb
attackerkb
CVE-2024-3094
2024-03-29 00:00:00
nessus
nessus
XZ Utils 5.6.0 / 5.6.1 Liblzma Backdoor Check
2024-04-01 00:00:00
GLSA-202403-04 : XZ utils: Backdoor in release tarballs
2024-04-01 00:00:00
Potential exposure to XZ Utils SSH Backdoor (CVE-2024-3094)
2024-03-29 00:00:00
talosblog
talosblog
rosalinux
rosalinux
Advisory ROSA-SA-2024-2407
2024-04-23 12:16:56
Advisory ROSA-SA-2024-2409
2024-04-23 12:23:07
Advisory ROSA-SA-2024-2408
2024-04-23 12:20:30
arista
arista
Security Advisory 0095
2024-04-03 00:00:00
redhatcve
redhatcve
CVE-2024-3094
2024-03-29 16:50:47
securelist
securelist
XZ backdoor story – Initial analysis
2024-04-12 08:00:34
Exploits and vulnerabilities in Q1 2024
2024-05-07 10:00:39
archlinux
archlinux
[ASA-202403-1] xz: arbitrary code execution
2024-03-29 00:00:00
debiancve
debiancve
CVE-2024-3094
2024-03-29 17:15:21
ubuntucve
ubuntucve
CVE-2024-3094
2024-03-29 00:00:00
rapid7blog
rapid7blog
Backdoored XZ Utils (CVE-2024-3094)
2024-04-01 17:13:05
gentoo
gentoo
XZ utils: Backdoor in release tarballs
2024-03-29 00:00:00
qualysblog
qualysblog
XZ Utils SSHd Backdoor
2024-03-30 04:06:05
debian
debian
[SECURITY] [DSA 5649-1] xz-utils security update
2024-03-29 16:10:02
hackread
hackread
Backdoor Discovered in XZ Utils: Patch Your Systems Now (CVE-2024-3094)
2024-04-01 23:17:59
openvas
openvas
Tukaani Project XZ Utils Backdoor (Feb/Mar 2024)
2024-04-02 00:00:00
osv
osv
CVE-2024-3094
2024-03-29 17:15:21
nvd
nvd
CVE-2024-3094
2024-03-29 17:15:21
alpinelinux
alpinelinux
CVE-2024-3094
2024-03-29 17:15:21
f5
f5
K000139141 : liblzma vulnerability CVE-2024-3094
2024-04-01 00:00:00
cvelist
cvelist
CVE-2024-3094 Xz: malicious code in distributed source
2024-03-29 16:51:12
thn
thn
Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution
2024-04-02 13:18:00
cve
cve
CVE-2024-3094
2024-03-29 17:15:21
trellix
trellix
The Bug Report - April 2024 Edition
2024-04-29 00:00:00
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
7 High
AI Score
Confidence
Low
0.133 Low
EPSS
Percentile
95.6%
Related for WIZBLOG:BABAEABBA55C1AF14806159B284EF03E