[CVE-2024-3094] Backdoor in XZ Utils allows RCE: everything you need to know
wiz.io | vulnerability | CVE-2024-3094 | #cloud | #rce | #supply-chain | #linux | #vulnerability | #backdoor | #xz-utils | #cve-2024-3094
Summary
Wiz explains CVE-2024-3094, the XZ Utils backdoor in versions 5.6.0 and 5.6.1 that could enable SSH authentication bypass and RCE on certain distros; about 2% of cloud environments were affected.
- CVE
- CVE-2024-3094
- Published
- Collected
--- id: 7182 title: "[CVE-2024-3094] Backdoor in XZ Utils allows RCE: everything you need to know" cve: CVE-2024-3094 source_domain: wiz.io source_url: "https://www.wiz.io/blog/cve-2024-3094-critical-rce-vulnerability-found-in-xz-utils" published_at: "2024-03-29T22:02:58Z" tags: ["cloud", "rce", "supply-chain", "linux", "vulnerability", "backdoor", "xz-utils", "cve-2024-3094"] phying_url: "https://phying.com/item/7182" lang: en --- # [CVE-2024-3094] Backdoor in XZ Utils allows RCE: everything you need to know ## Summary Wiz explains CVE-2024-3094, the XZ Utils backdoor in versions 5.6.0 and 5.6.1 that could enable SSH authentication bypass and RCE on certain distros; about 2% of cloud environments were affected. ## Intelligence Metadata - **Sources:** wiz.io - **CVE:** CVE-2024-3094 - **Published:** 2024-03-29T22:02:58Z - **Original:** https://www.wiz.io/blog/cve-2024-3094-critical-rce-vulnerability-found-in-xz-utils - **Phying News:** https://phying.com/item/7182