Skip to content
Supply Chain Backdoors, xz/liblzma, CVE-2024-3094, and what we currently know
bugcrowd.com | vulnerability | CVE-2024-3094 | #supply-chain | #open-source | #backdoor | #xz-utils | #cve-2024-3094 | #ssh | #supply-chain-security | #liblzma
Summary
Summarizes the xz/liblzma CVE-2024-3094 supply chain backdoor: Microsoft's Andres Freund noticed odd SSH CPU usage and 500ms delays, uncovering a backdoor planted by long-term contributor Jia Tan.
- Published
- Collected