Malicious Code Discovered in xz Upstream Tarballs, Affecting liblzma and Other Dependent Packages
Key Information
- Vendor
- Red Hat
- Status
- Xz
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Vendor
- CVE Published:
- 29 March 2024
Badges
Summary
CVE-2024-3094 is a severe vulnerability found in the XZ Utils compression library, affecting major Linux distributions such as Fedora, Kali Linux, and openSUSE. The vulnerability allows for unauthorized remote access to systems and has been exploited by injecting code into the authentication process to enable access. Red Hat has issued an urgent security alert and advised users to downgrade to an uncompromised version of XZ Utils. Additionally, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has advised users to downgrade to an earlier version of XZ Utils to mitigate the risk. There are currently no reports of active exploitation in the wild, but the severity of the vulnerability underscores the importance of addressing it promptly.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
News Articles
Online xz utility backdoor scanning tool issued
Binarly has issued a free online tool that would facilitate scanning a newly discovered backdoor and maximum severity vulnerability in xz tools and libraries used by major Linux distributions, tracked as CVE-2024-3094, across Linux binaries amid significant security risks, according to Security Affa...
2 months ago
Cve – InfoSec Write-ups
Read writing about Cve in InfoSec Write-ups. A collection of write-ups from the best hackers in the world on topics ranging from bug bounties and CTFs to vulnhub machines, hardware challenges and real life encounters. Subscribe to our weekly newsletter for the coolest infosec updates: https://weekly...
2 months ago
CVE-2024-3094: XZ Utils Backdoor Threatens Linux Systems | Tanium
A malicious backdoor was recently discovered in a component of the open-source XZ Utils tool, posing a threat to some Linux systems. The vulnerability is currently being tracked as CVE-2024-3094. Most...
5 months ago
EPSS Score
14% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
Risk change from: null to: 10 - (CRITICAL)
- 👾
Exploit exists.
- 🔥
Vulnerability reached the number 1 worldwide trending spot.
Vulnerability started trending.
First article discovered by Beeping Computers
Vulnerability Reserved.
Vulnerability published.
Reported to Red Hat.