XZ Utils

A beach scene with palm trees and a surfboard in the background. In the foreground, a red sign displays a warning about the critical vulnerability XZ Utils SSHD Backdoor with CVE-2024-3094, and the Upwind logo is in the top right corner.
Research

CVE-2024-3094: How to Protect Against the SSHD Backdoor Found in XZ Utilities

Denise Ashur
Denise Ashur
CVE: CVE-2024-3094 Affected versions: 5.6.0, 5.6.1 Affected Distributions: Fedora 41, Fedora Rawhide, Alpine, openSUSE, Debian experimental distributions versions 5.5.1alpha-0.1 to 5.6.1-1. On March 29, 2024, CISA warned of a malicious backdoor in the popular data compression software library XZ Utils. The vulnerability has been designated as CVE-2024-3094, and has been assigned a CVSS (Common Vulnerability…
Read More
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Link Copied
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS
Link Copied