Cyber Threat Report: 'Alert: CVE-2024-3094, a serious backdoor in XZ Utils, permits RCE'

Report Author Vulcan
Publication Date 2024-03-31
Original Reporting Source
Identified CVEs CVE-2024-3094
Victim Sectors Technology

This alert from Vulcan's Voyager18 team outlines a potential supply chain attack against the XZ Utils package for multiple Linux distributions. Captured as CVE-2024-3094, the alert describes how a contributor known as 'JiaT75' allegedly added code to the XZ code to target SSH interactions and effectively create a 'backdoor' into compromised systems.

Cyber Threat Graph Context

Explore how this report relates to the wider threat graph