How to find systems impacted by CVE-2024-3094 (XZ Utils backdoor)

runzero.com

Malicious code was pushed to the libxz-utils project that introduced a backdoor in SSH. Here's how to find potentially vulnerable systems.

1 page links to this URL

Shellsharks Michael Sass Mar 31, 2024

Links to analysis, discussion and more related to the xz/liblzma compromise (CVE-2024-3094).

2 inbound links article en infosec xz/liblzma Compromise Link Roundupshellsharksinfosecsupplychain