April 11, 2024 / news

CVE-2024-3094: Critical RCE Vulnerability in XZ Utils

A critical supply chain compromise has been detected in XZ Utils versions 5.6.0 and 5.6.1, which may lead to remote code execution (RCE) via SSH authentication on affected distributions.

Title: CVE-2024-3094: Critical RCE Vulnerability Found in XZ Utils

Summary: A critical supply chain compromise, CVE-2024-3094, has been detected in XZ Utils Data compression library versions 5.6.0 and 5.6.1. This vulnerability may lead to Remote Code Execution (RCE) via SSH authentication in specific versions of certain Linux distributions.

Source

← All news