Lucene search
300F28BA-6965-5E27-9B09-9205520C4895HistoryJun 11, 2024 - 2:19 p.m.
Exploit for Embedded Malicious Code in Tukaani Xz
2024-06-1114:19:17
59
tukaani xz
cve-2024-3094
k8s cluster
embedded malicious code
vulnerable pod
security context
execute commands
shutdown host
daemonset
port forward
access control
go installation
deployment
connection refused
container image
liblzma.so.5.6.0.patch
references.
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
7.5 High
AI Score
Confidence
Low
0.133 Low
EPSS
Percentile
95.6%
CVE-2024-3094
Basic POC to test CVE-2024-3094 vulnerability in…
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
thn
thn
Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution
2024-04-02 13:18:00
githubexploit
githubexploit
Exploit for Embedded Malicious Code in Tukaani Xz
2024-03-31 08:14:41
Exploit for Embedded Malicious Code in Tukaani Xz
2024-03-30 21:56:17
Exploit for Embedded Malicious Code in Tukaani Xz
2024-04-01 01:56:08
alpinelinux
alpinelinux
CVE-2024-3094
2024-03-29 17:15:21
f5
f5
K000139141 : liblzma vulnerability CVE-2024-3094
2024-04-01 00:00:00
nessus
nessus
Potential exposure to XZ Utils SSH Backdoor (CVE-2024-3094)
2024-03-29 00:00:00
XZ Utils 5.6.0 / 5.6.1 Liblzma Backdoor Check
2024-04-01 00:00:00
GLSA-202403-04 : XZ utils: Backdoor in release tarballs
2024-04-01 00:00:00
cve
cve
CVE-2024-3094
2024-03-29 17:15:21
cvelist
cvelist
CVE-2024-3094 Xz: malicious code in distributed source
2024-03-29 16:51:12
veracode
veracode
Injected Malicious Code
2024-04-01 21:18:10
attackerkb
attackerkb
CVE-2024-3094
2024-03-29 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2407
2024-04-23 12:16:56
Advisory ROSA-SA-2024-2409
2024-04-23 12:23:07
Advisory ROSA-SA-2024-2408
2024-04-23 12:20:30
talosblog
talosblog
arista
arista
Security Advisory 0095
2024-04-03 00:00:00
wizblog
wizblog
Backdoor in XZ Utils allows RCE: everything you need to know
2024-03-29 22:02:58
archlinux
archlinux
[ASA-202403-1] xz: arbitrary code execution
2024-03-29 00:00:00
ubuntucve
ubuntucve
CVE-2024-3094
2024-03-29 00:00:00
rapid7blog
rapid7blog
Backdoored XZ Utils (CVE-2024-3094)
2024-04-01 17:13:05
securelist
securelist
XZ backdoor story – Initial analysis
2024-04-12 08:00:34
Exploits and vulnerabilities in Q1 2024
2024-05-07 10:00:39
redhatcve
redhatcve
CVE-2024-3094
2024-03-29 16:50:47
debiancve
debiancve
CVE-2024-3094
2024-03-29 17:15:21
gentoo
gentoo
XZ utils: Backdoor in release tarballs
2024-03-29 00:00:00
qualysblog
qualysblog
XZ Utils SSHd Backdoor
2024-03-30 04:06:05
hackread
hackread
Backdoor Discovered in XZ Utils: Patch Your Systems Now (CVE-2024-3094)
2024-04-01 23:17:59
openvas
openvas
Tukaani Project XZ Utils Backdoor (Feb/Mar 2024)
2024-04-02 00:00:00
osv
osv
CVE-2024-3094
2024-03-29 17:15:21
nvd
nvd
CVE-2024-3094
2024-03-29 17:15:21
debian
debian
[SECURITY] [DSA 5649-1] xz-utils security update
2024-03-29 16:10:02
trellix
trellix
The Bug Report - April 2024 Edition
2024-04-29 00:00:00
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
7.5 High
AI Score
Confidence
Low
0.133 Low
EPSS
Percentile
95.6%
Related for 300F28BA-6965-5E27-9B09-9205520C4895