CVE-2024-3094criticalCWE-506

CVE-2024-3094: falha crítica em xz

Xz: malicious code in distributed source

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Red Hat Enterprise Linux+ Monitorar Red Hat JBoss Enterprise Application Platform

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

78Vexday Risk Score

Acompanhe. Ela tem alerta oficial do governo brasileiro e tem prova de conceito pública.

ssvc Attendcvss 10epss 91%
da publicação à armano mesmo dia
Publicada no NVD29 de mar.
1ª PoC29 de mar.
Alerta oficial no Brasil

O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.

Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
O que os fabricantes declaram (VEX)

Declarações oficiais dos fabricantes em formato CSAF/VEX: se o produto deles está afetado, já corrigido ou descartado — e por quê. É afirmação do fabricante, não juízo do Vexday.

Red Hatdocumento VEX ↗
Não afetado
6 produtos (26 componentes) — porque o código vulnerável não está presente no produto
Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 6 · e outros 1
Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
xzRed Hat · Red Hat Enterprise Linux 10Red Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 7Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat JBoss Enterprise Application Platform 8
PoCs públicas encontradas — 83
githubgithub.com/amlweems/xzbot★ 3555githubgithub.com/lockness-Ko/xz-vulnerable-honeypot★ 147githubgithub.com/FabioBaroni/CVE-2024-3094-checker★ 72githubgithub.com/robertdfrench/ifuncd-up★ 59githubgithub.com/byinarie/CVE-2024-3094-info★ 54githubgithub.com/jfrog/cve-2024-3094-tools★ 45githubgithub.com/gensecaihq/CVE-2024-3094-Vulnerability-Checker-Fixer★ 26githubgithub.com/0xlane/xz-cve-2024-3094★ 17githubgithub.com/r0binak/xzk8s★ 14githubgithub.com/teyhouse/CVE-2024-3094★ 11githubgithub.com/emirkmo/xz-backdoor-github★ 10githubgithub.com/HackerHermanos/CVE-2024-3094_xz_check★ 8githubgithub.com/badsectorlabs/ludus_xz_backdoor★ 6githubgithub.com/neuralinhibitor/xzwhy★ 5githubgithub.com/wgetnz/CVE-2024-3094-check★ 5githubgithub.com/KaminaDuck/ansible-CVE-2024-3094★ 4githubgithub.com/lypd0/CVE-2024-3094-Vulnerabity-Checker★ 4githubgithub.com/Yuma-Tsushima07/CVE-2024-3094★ 4githubgithub.com/pentestfunctions/CVE-2024-3094★ 3githubgithub.com/felipecosta09/cve-2024-3094★ 3githubgithub.com/przemoc/xz-backdoor-links★ 3githubgithub.com/jbnetwork-git/CVE-2024-3094-XZ-Utils-Check★ 3githubgithub.com/gustavorobertux/CVE-2024-3094★ 3githubgithub.com/Security-Phoenix-demo/CVE-2024-3094-fix-exploits★ 2githubgithub.com/ScrimForever/CVE-2024-3094★ 2githubgithub.com/Horizon-Software-Development/CVE-2024-3094★ 2githubgithub.com/mrk336/CVE-2024-3094★ 2githubgithub.com/Bella-Bc/xz-backdoor-CVE-2024-3094-Check★ 2githubgithub.com/DANO-AMP/CVE-2024-3094★ 2githubgithub.com/harekrishnarai/xz-utils-vuln-checker★ 1githubgithub.com/brinhosa/CVE-2024-3094-One-Liner★ 1githubgithub.com/galacticquest/cve-2024-3094-detect★ 1githubgithub.com/iheb2b/CVE-2024-3094-Checker★ 1githubgithub.com/robertdebock/ansible-playbook-cve-2024-3094★ 1githubgithub.com/valeriot30/cve-2024-3094★ 1githubgithub.com/24Owais/threat-intel-cve-2024-3094★ 1githubgithub.com/Ikram124/CVE-2024-3094-analysis★ 1githubgithub.com/M1lo25/CS50FinalProject★ 1githubgithub.com/nnatsopoulos/xz-backdoor-research★ 1githubgithub.com/mightysai1997/CVE-2024-3094-info★ 0githubgithub.com/MagpieRYL/CVE-2024-3094-backdoor-env-container★ 0githubgithub.com/spidygal/CVE-2024-3094-Nmap-NSE-script★ 0githubgithub.com/TheTorjanCaptain/CVE-2024-3094-Checker★ 0githubgithub.com/vesjolyjd/Kaspersky_CVE-2024-3094★ 0githubgithub.com/Simplifi-ED/CVE-2024-3094-patcher★ 0githubgithub.com/weltregie/liblzma-scan★ 0githubgithub.com/isuruwa/CVE-2024-3094★ 0githubgithub.com/stevehenderson/lab_xz_backdoor★ 0githubgithub.com/hazemkya/CVE-2024-3094-checker★ 0githubgithub.com/Juul/xz-backdoor-scan★ 0githubgithub.com/fevar54/Detectar-Backdoor-en-liblzma-de-XZ-utils-CVE-2024-3094-★ 0githubgithub.com/ashwani95/CVE-2024-3094★ 0githubgithub.com/AndreaCicca/Sicurezza-Informatica-Presentazione★ 0githubgithub.com/shefirot/CVE-2024-3094★ 0githubgithub.com/Fractal-Tess/CVE-2024-3094★ 0githubgithub.com/bioless/xz_cve-2024-3094_detection★ 0githubgithub.com/been22426/CVE-2024-3094★ 0githubgithub.com/laxmikumari615/Linux---Security---Detect-and-Mitigate-CVE-2024-3094★ 0githubgithub.com/OpensourceICTSolutions/xz_utils-CVE-2024-3094★ 0githubgithub.com/Bryn018/Semantic-Backdoor-Detector★ 0githubgithub.com/Dermot-lab/TryHack★ 0githubgithub.com/Mustafa1986/CVE-2024-3094★ 0githubgithub.com/Titus-soc/-CVE-2024-3094-Vulnerability-Checker-Fixer-Public★ 0githubgithub.com/MrBUGLF/XZ-Utils_CVE-2024-3094★ 0githubgithub.com/ThomRgn/xzutils_backdoor_obfuscation★ 0githubgithub.com/hariskhalil555000-sketch/What-utility-does-CVE-2024-3094-refer-to-★ 0githubgithub.com/encikayelwhitehat-glitch/CVE-2024-3094★ 0githubgithub.com/BOSE122/CVE-2024-3094★ 0githubgithub.com/hackura/xz-cve-2024-3094★ 0githubgithub.com/michalAshurov/writeup-CVE-2024-3094★ 0githubgithub.com/extracoding-dozen/CVE-2024-3094★ 0githubgithub.com/ElinaNotElina/cve-2024-3094-analysis★ 0githubgithub.com/vnchk1/sec_review_cve-2024-3094★ 0githubgithub.com/h3raklez/CVE-2024-3094★ 0githubgithub.com/Ava-Vispilio/CVE-2024-3094★ 0githubgithub.com/0xBlackash/CVE-2024-3094★ 0githubgithub.com/dah4k/CVE-2024-3094★ 0githubgithub.com/hackingetico21/revisaxzutils★ 0githubgithub.com/devjanger/CVE-2024-3094-XZ-Backdoor-Detector★ 0githubgithub.com/ackemed/detectar_cve-2024-3094★ 0githubgithub.com/zpxlz/CVE-2024-3094★ 0githubgithub.com/mesutgungor/xz-backdoor-vulnerability★ 0githubgithub.com/mightysai1997/CVE-2024-3094★ 0
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — xz

No mesmo produto, das mais perigosas para as menos.

CVE-2023-4911HIGHGlibc: buffer overflow in ld.so leading to privilege escalationEPSS 63.8%KEVCVE-2024-6387HIGHOpenssh: regresshion - race condition in ssh allows rce/dosEPSS 99.5%CVE-2024-12084CRITICALRsync: heap buffer overflow in rsync due to improper checksum length handlingEPSS 72.5%CVE-2023-1183MEDIUMArbitrary file writeEPSS 64.9%CVE-2023-34966HIGHSamba: infinite loop in mdssvc rpc service for spotlightEPSS 62.4%CVE-2023-34967MEDIUMSamba: type confusion in mdssvc rpc service for spotlightEPSS 61.2%