---
id: 22
title: "[CVE-2024-3094] All about the xz-utils backdoor"
cve: CVE-2024-3094
source_domain: kali.org
source_url: "https://www.kali.org/blog/about-the-xz-backdoor/"
published_at: "2024-03-29T00:00:00Z"
tags: ["incident-response", "linux", "vulnerability", "kali-linux", "backdoor", "supply-chain-attack", "sshd"]
phying_url: "https://phying.com/item/22"
lang: en
---

# [CVE-2024-3094] All about the xz-utils backdoor

## Summary

Kali explains CVE-2024-3094: xz-utils 5.6.0-5.6.1 contained a backdoor that could compromise sshd authentication and grant remote system access, with commands to check and patch affected installs.

## Intelligence Metadata

- **Sources:** kali.org
- **CVE:** CVE-2024-3094
- **Published:** 2024-03-29T00:00:00Z
- **Original:** https://www.kali.org/blog/about-the-xz-backdoor/
- **Phying News:** https://phying.com/item/22