Sec Feed Reader

CVE-2024-3094

Kenndaten

CVE.org (extern): Record bei CVE.org oeffnen
CVSS (CVE.org): — (nutze cve_org-Anreicherung oder Warten bis NVD/CNA-Daten)
EPSS (FIRST): Score 0.85058000000, Perzentil 0.99367000000
EPSS-Stand: 2026-06-03 13:12 UTC
Veroeffentlicht (CVE.org): —
Zuletzt angereichert: —
Externe Referenzen (Anzahl): 70
Anreicherungs-Plugins (Referenzen): github_poc, osv
CVSS (Quelle / verkn. Eintraege): 10.0 — Werte aus Feed-Eintraegen; CVSS (CVE.org) kommt aus Anreicherung cve_org.

Eintraege mit Bezug zu CVE-2024-3094

Veroeffentlicht	Quelle	Titel	Severity	Kategorie
2024-04-03 10:00	bsi_csw	Version 1.1: Kritische Backdoor in XZ für Linux	CRITICAL	government_cert

Externe Referenzen zu CVE-2024-3094

Bezeichnung	Typ	Entry	Quelle
GitHub Hex0rc1st/CVE_POC_monitor: Automatically push newly disclosed POC information.	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub JonathanSiemering/stars	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub Sai-teja-007/vulnscout	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub abhinav-uinx/VOID-TECH	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub alessandro-bitetto/chaindora	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub alexzeitgeist/starred	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub cloudfieldcz/shieldoo-gate	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub dick318/awesome-stars	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub hejun789/CyberSentinel: Autonomous cybersecurity threat intelligence agent — port scan, WHOIS, DNS, VirusTotal & AI-powered analysis with IOC ex	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub hiifong/starList: Export your star's repository list	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub jmckee27/CVE-Dashboard	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub johe123qwe/github-trending: 定时抓取 Github Trending	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub lemon-mint/stars	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub m3hdx/MSSC-CRWD-Plugin: A custom MS Security Copilot plugin for Crowdtstrike	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
GitHub sardonyx001/awesome-stars: My Awesome List	POC	Version 1.1: Kritische Backdoor in XZ für Linux	github_poc
OSV [WEB]: http://www.openwall.com/lists/oss-security/2024/03/29/10	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: http://www.openwall.com/lists/oss-security/2024/03/29/12	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: http://www.openwall.com/lists/oss-security/2024/03/29/4	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: http://www.openwall.com/lists/oss-security/2024/03/29/5	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: http://www.openwall.com/lists/oss-security/2024/03/29/8	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: http://www.openwall.com/lists/oss-security/2024/03/30/12	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: http://www.openwall.com/lists/oss-security/2024/03/30/27	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: http://www.openwall.com/lists/oss-security/2024/03/30/36	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: http://www.openwall.com/lists/oss-security/2024/03/30/5	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: http://www.openwall.com/lists/oss-security/2024/04/16/5	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://access.redhat.com/security/cve/CVE-2024-3094	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: https://ariadne.space/2024/04/02/the-xz-utils-backdoor-is-a-symptom-of-a-larger-problem/	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://aws.amazon.com/security/security-bulletins/AWS-2024-002/	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ARTICLE]: https://blog.netbsd.org/tnf/entry/statement_on_backdoor_in_xz	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://boehs.org/node/everything-i-know-about-the-xz-backdoor	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068024	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [REPORT]: https://bugs.gentoo.org/928134	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [REPORT]: https://bugzilla.redhat.com/show_bug.cgi?id=2272210	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [REPORT]: https://bugzilla.suse.com/show_bug.cgi?id=1222124	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://discourse.nixos.org/t/cve-2024-3094-malicious-code-in-xz-5-6-0-and-5-6-1-tarballs/42405	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://github.com/advisories/GHSA-rxwq-x6h5-x525	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [PACKAGE]: https://github.com/amlweems/xzbot	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://github.com/karcherm/xz-malware	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://gynvael.coldwind.pl/?lang=en&id=782	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://lists.debian.org/debian-security-announce/2024/msg00057.html	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://lists.freebsd.org/archives/freebsd-security/2024-March/000248.html	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [REPORT]: https://lwn.net/Articles/967180/	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [REPORT]: https://news.ycombinator.com/item?id=39865810	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [REPORT]: https://news.ycombinator.com/item?id=39877267	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: https://news.ycombinator.com/item?id=39895344	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://openssf.org/blog/2024/03/30/xz-backdoor-cve-2024-3094/	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: https://research.swtch.com/xz-script	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: https://research.swtch.com/xz-timeline	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://security-tracker.debian.org/tracker/CVE-2024-3094	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://security.alpinelinux.org/vuln/CVE-2024-3094	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://security.archlinux.org/CVE-2024-3094	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://security.netapp.com/advisory/ntap-20240402-0001/	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [REPORT]: https://tukaani.org/xz-backdoor/	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://twitter.com/LetsDefendIO/status/1774804387417751958	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: https://twitter.com/debian/status/1774219194638409898	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: https://twitter.com/infosecb/status/1774595540233167206	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: https://twitter.com/infosecb/status/1774597228864139400	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://ubuntu.com/security/CVE-2024-3094	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ARTICLE]: https://www.binarly.io/blog/persistent-risk-xz-utils-backdoor-still-lurking-in-docker-images	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://www.darkreading.com/vulnerabilities-threats/are-you-affected-by-the-backdoor-in-xz-utils	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ARTICLE]: https://www.kali.org/blog/about-the-xz-backdoor/	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ARTICLE]: https://www.openwall.com/lists/oss-security/2024/03/29/4	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://www.tenable.com/blog/frequently-asked-questions-cve-2024-3094-supply-chain-backdoor-in-xz-utils	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: https://www.theregister.com/2024/03/29/malicious_backdoor_xz/	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [WEB]: https://www.vicarius.io/vsociety/vulnerabilities/cve-2024-3094	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv
OSV [ADVISORY]: https://xeiaso.net/notes/2024/xz-vuln/	OSV	Version 1.1: Kritische Backdoor in XZ für Linux	osv

Alle CVEs