[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7kAaWozUo0n3vBNL3zSoDRgLsBf8Fa4xfMit5mrnEmk":3,"g5a-risk:CVE-2024-3094":285},{"success":4,"data":5,"meta":282},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":27,"epssTimeSeries":38,"severity":41,"affectedProducts":42,"affectedProductsCount":51,"references":52,"referencesCount":232,"weaknesses":233,"weaknessesCount":242,"isActivelyExploited":243,"cisaInfo":27,"otxData":27,"relatedBlogPosts":244,"seoMetadata":245,"configurations":270,"relatedVendorCves":280,"notableEvents":281},"CVE-2024-3094","What is CVE-2024-3094?","Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. \r\nThrough a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.","Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build proces...","2024-03-29T17:15:21.15","2026-06-17T07:43:17.83",10,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":36},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,3.9,6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[],[],0.909,[39,39,40,40,40,37,37],0.85974,0.90461,"Critical",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"tukaani","xz","5.6.0","cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"5.6.1","cpe:2.3:a:tukaani:xz:5.6.1:*:*:*:*:*:*:*",2,[53,58,62,67,70,73,76,79,82,85,88,91,94,97,100,102,106,111,115,119,123,127,131,133,137,141,145,148,151,154,159,162,166,170,174,177,180,184,188,191,194,198,202,206,210,214,218,221,224,228],{"url":54,"source":55,"tags":56},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2024-3094","Red Hat",[57],"Vendor Advisory",{"url":59,"source":55,"tags":60},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2272210",[61,57],"Issue Tracking",{"url":63,"source":64,"tags":65},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F29\u002F4","Openwall",[66],"Mailing List",{"url":68,"source":55,"tags":69},"https:\u002F\u002Fwww.redhat.com\u002Fen\u002Fblog\u002Furgent-security-alert-fedora-41-and-rawhide-users",[57],{"url":71,"source":64,"tags":72},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F29\u002F10",[],{"url":74,"source":64,"tags":75},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F29\u002F12",[],{"url":77,"source":64,"tags":78},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F29\u002F4",[],{"url":80,"source":64,"tags":81},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F29\u002F5",[],{"url":83,"source":64,"tags":84},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F29\u002F8",[],{"url":86,"source":64,"tags":87},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F30\u002F12",[],{"url":89,"source":64,"tags":90},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F30\u002F27",[],{"url":92,"source":64,"tags":93},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F30\u002F36",[],{"url":95,"source":64,"tags":96},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F30\u002F5",[],{"url":98,"source":64,"tags":99},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F04\u002F16\u002F5",[],{"url":54,"source":55,"tags":101},[57],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fariadne.space\u002F2024\u002F04\u002F02\u002Fthe-xz-utils-backdoor-is-a-symptom-of-a-larger-problem\u002F","Ariadne",[],{"url":107,"source":108,"tags":109},"https:\u002F\u002Farstechnica.com\u002Fsecurity\u002F2024\u002F03\u002Fbackdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections\u002F","Arstechnica",[110],"Third Party Advisory",{"url":112,"source":113,"tags":114},"https:\u002F\u002Faws.amazon.com\u002Fsecurity\u002Fsecurity-bulletins\u002FAWS-2024-002\u002F","Amazon",[110],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fblog.netbsd.org\u002Ftnf\u002Fentry\u002Fstatement_on_backdoor_in_xz","Netbsd",[],{"url":120,"source":121,"tags":122},"https:\u002F\u002Fboehs.org\u002Fnode\u002Feverything-i-know-about-the-xz-backdoor","Boehs",[110],{"url":124,"source":125,"tags":126},"https:\u002F\u002Fbugs.debian.org\u002Fcgi-bin\u002Fbugreport.cgi?bug=1068024","Debian",[66,57],{"url":128,"source":129,"tags":130},"https:\u002F\u002Fbugs.gentoo.org\u002F928134","Gentoo",[61,110],{"url":59,"source":55,"tags":132},[61,57],{"url":134,"source":135,"tags":136},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1222124","Suse",[61,110],{"url":138,"source":139,"tags":140},"https:\u002F\u002Fdiscourse.nixos.org\u002Ft\u002Fcve-2024-3094-malicious-code-in-xz-5-6-0-and-5-6-1-tarballs\u002F42405","Nixos",[110],{"url":142,"source":143,"tags":144},"https:\u002F\u002Fgist.github.com\u002Fthesamesam\u002F223949d5a074ebc3dce9ee78baad9e27","GitHub",[110],{"url":146,"source":143,"tags":147},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rxwq-x6h5-x525",[110],{"url":149,"source":143,"tags":150},"https:\u002F\u002Fgithub.com\u002Famlweems\u002Fxzbot",[],{"url":152,"source":143,"tags":153},"https:\u002F\u002Fgithub.com\u002Fkarcherm\u002Fxz-malware",[110],{"url":155,"source":156,"tags":157},"https:\u002F\u002Fgynvael.coldwind.pl\u002F?lang=en&id=782","Coldwind",[158,110],"Technical Description",{"url":160,"source":125,"tags":161},"https:\u002F\u002Flists.debian.org\u002Fdebian-security-announce\u002F2024\u002Fmsg00057.html",[66,110],{"url":163,"source":164,"tags":165},"https:\u002F\u002Flists.freebsd.org\u002Farchives\u002Ffreebsd-security\u002F2024-March\u002F000248.html","Freebsd",[110],{"url":167,"source":168,"tags":169},"https:\u002F\u002Flwn.net\u002FArticles\u002F967180\u002F","Lwn",[61,110],{"url":171,"source":172,"tags":173},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=39865810","Ycombinator",[61,110],{"url":175,"source":172,"tags":176},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=39877267",[61],{"url":178,"source":172,"tags":179},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=39895344",[],{"url":181,"source":182,"tags":183},"https:\u002F\u002Fopenssf.org\u002Fblog\u002F2024\u002F03\u002F30\u002Fxz-backdoor-cve-2024-3094\u002F","Openssf",[110],{"url":185,"source":186,"tags":187},"https:\u002F\u002Fresearch.swtch.com\u002Fxz-script","Swtch",[],{"url":189,"source":186,"tags":190},"https:\u002F\u002Fresearch.swtch.com\u002Fxz-timeline",[],{"url":192,"source":125,"tags":193},"https:\u002F\u002Fsecurity-tracker.debian.org\u002Ftracker\u002FCVE-2024-3094",[110],{"url":195,"source":196,"tags":197},"https:\u002F\u002Fsecurity.alpinelinux.org\u002Fvuln\u002FCVE-2024-3094","Alpinelinux",[110],{"url":199,"source":200,"tags":201},"https:\u002F\u002Fsecurity.archlinux.org\u002FCVE-2024-3094","Archlinux",[110],{"url":203,"source":204,"tags":205},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240402-0001\u002F","Netapp",[],{"url":207,"source":208,"tags":209},"https:\u002F\u002Ftukaani.org\u002Fxz-backdoor\u002F","Tukaani",[61,57],{"url":211,"source":212,"tags":213},"https:\u002F\u002Ftwitter.com\u002FLetsDefendIO\u002Fstatus\u002F1774804387417751958","Twitter",[110],{"url":215,"source":212,"tags":216},"https:\u002F\u002Ftwitter.com\u002Fdebian\u002Fstatus\u002F1774219194638409898",[217],"Press\u002FMedia Coverage",{"url":219,"source":212,"tags":220},"https:\u002F\u002Ftwitter.com\u002Finfosecb\u002Fstatus\u002F1774595540233167206",[217],{"url":222,"source":212,"tags":223},"https:\u002F\u002Ftwitter.com\u002Finfosecb\u002Fstatus\u002F1774597228864139400",[217],{"url":225,"source":226,"tags":227},"https:\u002F\u002Fubuntu.com\u002Fsecurity\u002FCVE-2024-3094","Ubuntu",[110],{"url":229,"source":230,"tags":231},"https:\u002F\u002Fwww.binarly.io\u002Fblog\u002Fpersistent-risk-xz-utils-backdoor-still-lurking-in-docker-images","Binarly",[],50,[234],{"id":235,"name":236,"description":237,"extendedDescription":238,"status":239,"abstraction":240,"structure":241},"CWE-506","Embedded Malicious Code","The product contains code that appears to be malicious in nature.","Malicious flaws have acquired colorful names, including Trojan horse, trapdoor, timebomb, and logic-bomb. A developer might insert malicious code with the intent to subvert the security of a product or its host system at some time in the future. It generally refers to a program that performs a useful service but exploits rights of the program's user in a way the user does not intend.","Incomplete","Class","Simple",1,false,[],{"title":246,"metaDescription":247,"keywords":248,"canonicalUrl":249,"structuredData":250},"What is CVE-2024-3094? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-3094, a critical severity cyber security vulnerability from 2024. High exploit probability (90.9%). Malicious code was dis...","CVE-2024-3094, CVE-2024-3094 vulnerability, CVE-2024-3094 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, tukaani security, xz vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2024-3094",{"@context":251,"@type":252,"headline":246,"description":247,"datePublished":10,"dateModified":11,"author":253,"publisher":257,"about":261,"mainEntityOfPage":265,"articleSection":268,"keywords":269},"https:\u002F\u002Fschema.org","TechArticle",{"@type":254,"name":255,"url":256},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":254,"name":255,"url":256,"logo":258},{"@type":259,"url":260},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":262,"name":6,"description":263,"additionalType":264},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":266,"@id":267},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-3094","Cybersecurity","CVE-2024-3094, CVE-2024-3094 vulnerability, CVE-2024-3094 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[271],{"Operator":27,"Negate":27,"Nodes":272},[273],{"Operator":274,"Negate":243,"CPEMatch":275},"OR",[276,278],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":277,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"73F1DAD7-F362-4C5B-B980-2E5313C369DA",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":279,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"55782A0B-B9C5-4536-A885-84CAB7029C09",[],[],{"lastModified":11,"cacheTime":283,"version":284},1792361945567,"2.0",{"score":286,"band":287,"action":288,"scoredAt":289},84,"High","Patch now","2026-10-16T07:01:20.190304+00:00"]