CVE-2024-3094 (Q125219823)

backdoor discovered in 2024

XZ Backdoor
XZ Utils backdoor
XZorcist

Language	Label	Description	Also known as
English	CVE-2024-3094	backdoor discovered in 2024	XZ Backdoor XZ Utils backdoor XZorcist

Statements

0 references

0 references

0 references

0 references

0 references

29 March 2024

1 reference

reference URL

https://www.cve.org/CVERecord?id=CVE-2024-3094

retrieved

30 March 2024

time of discovery or invention

29 March 2024

1 reference

reference URL

https://www.openwall.com/lists/oss-security/2024/03/29/4

retrieved

30 March 2024

28 March 2024

1 reference

reference URL

https://research.swtch.com/xz-timeline

retrieved

3 April 2024

depends on software

XZ Utils

software version identifier

5.6.0

5.6.1

2 references

reference URL

https://tukaani.org/xz-backdoor/

retrieved

30 March 2024

reference URL

https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094

language of work or name

English

official website

https://tukaani.org/xz-backdoor/

language of work or name

English

0 references

described at URL

https://boehs.org/node/everything-i-know-about-the-xz-backdoor

language of work or name

English

full work available at URL

https://web.archive.org/web/20240330124603/https://boehs.org/node/everything-i-know-about-the-xz-backdoor

archive date

30 March 2024

0 references

https://gist.github.com/ecki/af2ec3b6994afae0b65cb5f3747af064

language of work or name

English

full work available at URL

https://web.archive.org/web/20240330220146/https://gist.github.com/ecki/af2ec3b6994afae0b65cb5f3747af064

archive date

30 March 2024

0 references

https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094

language of work or name

English

full work available at URL

https://web.archive.org/web/20240330150229/https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094

archive date

30 March 2024

0 references

https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/

language of work or name

English

full work available at URL

https://web.archive.org/web/20240330221015/https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/

archive date

30 March 2024

0 references

https://www.heise.de/news/Hintertuer-in-xz-Bibliothek-gefaehrdet-SSH-Verbindungen-9671317.html

language of work or name

German

full work available at URL

https://web.archive.org/web/20240330221330/https://www.heise.de/news/Hintertuer-in-xz-Bibliothek-gefaehrdet-SSH-Verbindungen-9671317.html

archive date

30 March 2024

0 references

https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27

language of work or name

English

full work available at URL

https://web.archive.org/web/20240330124604/https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27

archive date

30 March 2024

0 references

https://tukaani.org/xz-backdoor/

language of work or name

0 references

1 reference

https://www.nytimes.com/2024/04/03/technology/prevent-cyberattack-linux.html

retrieved

5 April 2024

perpetrator

Jia Tan

0 references

has part(s) of the class

Embedded Malicious Code

1 reference

reference URL

https://nvd.nist.gov/vuln/detail/CVE-2024-3094

language of work or name

English

Identifiers

Common Vulnerabilities and Exposures ID

0 references

1 reference

https://nvd.nist.gov/vuln/detail/CVE-2024-3094

language of work or name

English

Google Knowledge Graph ID

/g/11vwq50rls

0 references

Sitelinks

Wikipedia(10 entries)

cawiki Porta del darrere de XZ Utils
cswiki Zadní vrátka v XZ Utils
dewiki CVE-2024-3094
enwiki XZ Utils backdoor
eswiki Ataque por puerta trasera a XZ Utils
frwiki Attaque de XZ Utils par porte dérobée
kowiki XZ Utils 백도어
ruwiki Бэкдор в XZ
simplewiki XZ Utils backdoor
zhwiki XZ实用程序后门

CVE-2024-3094 (Q125219823)

Statements

Identifiers

Sitelinks

Wikipedia(10 entries)

Wikibooks(0 entries)

Wikinews(0 entries)

Wikiquote(0 entries)

Wikisource(0 entries)

Wikiversity(0 entries)

Wikivoyage(0 entries)

Wiktionary(0 entries)

Multilingual sites(0 entries)

Navigation menu

CVE-2024-3094 (Q125219823)

Statements

Identifiers

Sitelinks

Wikipedia(10 entries)

Wikibooks(0 entries)

Wikinews(0 entries)

Wikiquote(0 entries)

Wikisource(0 entries)

Wikiversity(0 entries)

Wikivoyage(0 entries)

Wiktionary(0 entries)

Multilingual sites(0 entries)

Navigation menu

Search