{"schemaVersion":1,"id":"CVE-2024-3094","requestedId":"CVE-2024-3094","aliases":["ALPINE-CVE-2024-3094","UBUNTU-CVE-2024-3094","DEBIAN-CVE-2024-3094","CGA-42f2-4jw2-vjhp","CGA-92fm-f345-22r5","CGA-p56r-v7qh-5r94","CGA-qwh4-287x-98f3","openSUSE-SU-2024:14017-1"],"status":"published","rawState":"Modified","rawSeverityStatus":"Modified","duplicateOf":null,"indexable":true,"title":null,"description":"Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0.\nThrough a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.","dates":{"published":"2024-03-29T16:51:12.588Z","modified":"2026-08-04T07:05:54.671Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"cve.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"cve.org","score":10,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"osv_alpine","score":10,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","exploitability":10,"impact":10,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"osv_ubuntu","score":10,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","exploitability":10,"impact":10,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"osv_debian","score":10,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","exploitability":10,"impact":10,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"osv_wolfi","score":10,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","exploitability":10,"impact":10,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"osv_chainguard","score":10,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","exploitability":10,"impact":10,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"nvd","score":10,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.90461,"percentile":0.99802,"severity":"critical","asOf":"2026-10-14T00:00:00.000Z","change":{"pp":4.487000000000007,"baselineDate":"2026-09-14T00:00:00.000Z","baselineScore":0.85974},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.85974,"percentile":0.99716},{"date":"2026-09-15T00:00:00.000Z","score":0.85974,"percentile":0.99716},{"date":"2026-09-16T00:00:00.000Z","score":0.85974,"percentile":0.99717},{"date":"2026-09-17T00:00:00.000Z","score":0.85974,"percentile":0.99718},{"date":"2026-09-18T00:00:00.000Z","score":0.85974,"percentile":0.99719},{"date":"2026-09-19T00:00:00.000Z","score":0.85974,"percentile":0.99719},{"date":"2026-09-20T00:00:00.000Z","score":0.85974,"percentile":0.99719},{"date":"2026-09-21T00:00:00.000Z","score":0.85974,"percentile":0.99725},{"date":"2026-09-22T00:00:00.000Z","score":0.85974,"percentile":0.99719},{"date":"2026-09-23T00:00:00.000Z","score":0.85974,"percentile":0.99719},{"date":"2026-09-24T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-09-25T00:00:00.000Z","score":0.85974,"percentile":0.99723},{"date":"2026-09-26T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-09-27T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-09-28T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-09-29T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-09-30T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-10-01T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-10-02T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-10-03T00:00:00.000Z","score":0.85974,"percentile":0.99725},{"date":"2026-10-04T00:00:00.000Z","score":0.85974,"percentile":0.99725},{"date":"2026-10-05T00:00:00.000Z","score":0.85974,"percentile":0.99725},{"date":"2026-10-06T00:00:00.000Z","score":0.85974,"percentile":0.99725},{"date":"2026-10-07T00:00:00.000Z","score":0.85974,"percentile":0.99726},{"date":"2026-10-08T00:00:00.000Z","score":0.85974,"percentile":0.99726},{"date":"2026-10-09T00:00:00.000Z","score":0.85974,"percentile":0.99726},{"date":"2026-10-10T00:00:00.000Z","score":0.85974,"percentile":0.99727},{"date":"2026-10-11T00:00:00.000Z","score":0.85974,"percentile":0.99727},{"date":"2026-10-12T00:00:00.000Z","score":0.85974,"percentile":0.99727},{"date":"2026-10-13T00:00:00.000Z","score":0.90461,"percentile":0.99801},{"date":"2026-10-14T00:00:00.000Z","score":0.90461,"percentile":0.99802}],"last30":[{"date":"2026-09-14T00:00:00.000Z","score":0.85974,"percentile":0.99716},{"date":"2026-09-15T00:00:00.000Z","score":0.85974,"percentile":0.99716},{"date":"2026-09-16T00:00:00.000Z","score":0.85974,"percentile":0.99717},{"date":"2026-09-17T00:00:00.000Z","score":0.85974,"percentile":0.99718},{"date":"2026-09-18T00:00:00.000Z","score":0.85974,"percentile":0.99719},{"date":"2026-09-19T00:00:00.000Z","score":0.85974,"percentile":0.99719},{"date":"2026-09-20T00:00:00.000Z","score":0.85974,"percentile":0.99719},{"date":"2026-09-21T00:00:00.000Z","score":0.85974,"percentile":0.99725},{"date":"2026-09-22T00:00:00.000Z","score":0.85974,"percentile":0.99719},{"date":"2026-09-23T00:00:00.000Z","score":0.85974,"percentile":0.99719},{"date":"2026-09-24T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-09-25T00:00:00.000Z","score":0.85974,"percentile":0.99723},{"date":"2026-09-26T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-09-27T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-09-28T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-09-29T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-09-30T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-10-01T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-10-02T00:00:00.000Z","score":0.85974,"percentile":0.99724},{"date":"2026-10-03T00:00:00.000Z","score":0.85974,"percentile":0.99725},{"date":"2026-10-04T00:00:00.000Z","score":0.85974,"percentile":0.99725},{"date":"2026-10-05T00:00:00.000Z","score":0.85974,"percentile":0.99725},{"date":"2026-10-06T00:00:00.000Z","score":0.85974,"percentile":0.99725},{"date":"2026-10-07T00:00:00.000Z","score":0.85974,"percentile":0.99726},{"date":"2026-10-08T00:00:00.000Z","score":0.85974,"percentile":0.99726},{"date":"2026-10-09T00:00:00.000Z","score":0.85974,"percentile":0.99726},{"date":"2026-10-10T00:00:00.000Z","score":0.85974,"percentile":0.99727},{"date":"2026-10-11T00:00:00.000Z","score":0.85974,"percentile":0.99727},{"date":"2026-10-12T00:00:00.000Z","score":0.85974,"percentile":0.99727},{"date":"2026-10-13T00:00:00.000Z","score":0.90461,"percentile":0.99801},{"date":"2026-10-14T00:00:00.000Z","score":0.90461,"percentile":0.99802}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","evidence":[]},"exploits":[],"exploitCount":0,"exploitSources":[],"weaknesses":[{"id":"CWE-506","name":"Embedded Malicious Code","description":"The product contains code that appears to be malicious in nature.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/506.html","capec":[{"id":"CAPEC-442","name":"Infected Software","url":"https://capec.mitre.org/data/definitions/442.html"},{"id":"CAPEC-448","name":"Embed Virus into DLL","url":"https://capec.mitre.org/data/definitions/448.html"},{"id":"CAPEC-636","name":"Hiding Malicious Data or Code within Files","url":"https://capec.mitre.org/data/definitions/636.html"}],"techniques":[{"id":"T1001.002","name":"Steganography","url":"https://attack.mitre.org/techniques/T1001/002/","tactics":[{"id":"TA0101","name":"Command and Control"}]},{"id":"T1027.003","name":"Steganography","url":"https://attack.mitre.org/techniques/T1027/003/","tactics":[{"id":"TA0005","name":"Stealth"}]},{"id":"T1027.004","name":"Compile After Delivery","url":"https://attack.mitre.org/techniques/T1027/004/","tactics":[{"id":"TA0005","name":"Stealth"}]},{"id":"T1027.009","name":"Embedded Payloads","url":"https://attack.mitre.org/techniques/T1027/009/","tactics":[{"id":"TA0005","name":"Stealth"}]},{"id":"T1195.001","name":"Compromise Software Dependencies and Development Tools","url":"https://attack.mitre.org/techniques/T1195/001/","tactics":[{"id":"TA0108","name":"Initial Access"}]},{"id":"T1195.002","name":"Compromise Software Supply Chain","url":"https://attack.mitre.org/techniques/T1195/002/","tactics":[{"id":"TA0108","name":"Initial Access"}]},{"id":"T1218.001","name":"Compiled HTML File","url":"https://attack.mitre.org/techniques/T1218/001/","tactics":[{"id":"TA0005","name":"Stealth"}]},{"id":"T1221","name":"Template Injection","url":"https://attack.mitre.org/techniques/T1221/","tactics":[{"id":"TA0005","name":"Stealth"}]}],"countermeasures":[{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FCA","name":"File Creation Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FCA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-OTF","name":"Outbound Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-OTF/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-RPA","name":"Relay Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RPA/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"}]}],"ttp":{"capecs":[{"id":"CAPEC-442","name":"Infected Software","url":"https://capec.mitre.org/data/definitions/442.html","weaknessIds":["CWE-506"],"techniqueIds":["T1195.001","T1195.002"]},{"id":"CAPEC-448","name":"Embed Virus into DLL","url":"https://capec.mitre.org/data/definitions/448.html","weaknessIds":["CWE-506"],"techniqueIds":["T1027.009"]},{"id":"CAPEC-636","name":"Hiding Malicious Data or Code within Files","url":"https://capec.mitre.org/data/definitions/636.html","weaknessIds":["CWE-506"],"techniqueIds":["T1001.002","T1027.003","T1027.004","T1218.001","T1221"]}],"techniques":[{"id":"T1001.002","name":"Steganography","url":"https://attack.mitre.org/techniques/T1001/002/","weaknessIds":["CWE-506"],"capecIds":["CAPEC-636"],"tactics":[{"id":"TA0101","name":"Command and Control"}],"countermeasures":[{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-OTF","name":"Outbound Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-OTF/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-RPA","name":"Relay Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RPA/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"}]},{"id":"T1027.003","name":"Steganography","url":"https://attack.mitre.org/techniques/T1027/003/","weaknessIds":["CWE-506"],"capecIds":["CAPEC-636"],"tactics":[{"id":"TA0005","name":"Stealth"}],"countermeasures":[]},{"id":"T1027.004","name":"Compile After Delivery","url":"https://attack.mitre.org/techniques/T1027/004/","weaknessIds":["CWE-506"],"capecIds":["CAPEC-636"],"tactics":[{"id":"TA0005","name":"Stealth"}],"countermeasures":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"}]},{"id":"T1027.009","name":"Embedded Payloads","url":"https://attack.mitre.org/techniques/T1027/009/","weaknessIds":["CWE-506"],"capecIds":["CAPEC-448"],"tactics":[{"id":"TA0005","name":"Stealth"}],"countermeasures":[]},{"id":"T1195.001","name":"Compromise Software Dependencies and Development Tools","url":"https://attack.mitre.org/techniques/T1195/001/","weaknessIds":["CWE-506"],"capecIds":["CAPEC-442"],"tactics":[{"id":"TA0108","name":"Initial Access"}],"countermeasures":[{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"}]},{"id":"T1195.002","name":"Compromise Software Supply Chain","url":"https://attack.mitre.org/techniques/T1195/002/","weaknessIds":["CWE-506"],"capecIds":["CAPEC-442"],"tactics":[{"id":"TA0108","name":"Initial Access"}],"countermeasures":[{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"}]},{"id":"T1218.001","name":"Compiled HTML File","url":"https://attack.mitre.org/techniques/T1218/001/","weaknessIds":["CWE-506"],"capecIds":["CAPEC-636"],"tactics":[{"id":"TA0005","name":"Stealth"}],"countermeasures":[{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-FCA","name":"File Creation Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FCA/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"}]},{"id":"T1221","name":"Template Injection","url":"https://attack.mitre.org/techniques/T1221/","weaknessIds":["CWE-506"],"capecIds":["CAPEC-636"],"tactics":[{"id":"TA0005","name":"Stealth"}],"countermeasures":[]}],"countermeasures":[{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FCA","name":"File Creation Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FCA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-OTF","name":"Outbound Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-OTF/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-RPA","name":"Relay Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RPA/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"}],"countermeasuresByTactic":[{"tactic":"Harden","items":[{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"}]},{"tactic":"Detect","items":[{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FCA","name":"File Creation Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FCA/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-RPA","name":"Relay Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RPA/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"}]},{"tactic":"Isolate","items":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-OTF","name":"Outbound Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-OTF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"}]},{"tactic":"Evict","items":[{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"}]},{"tactic":"Restore","items":[{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"}]},{"tactic":"Deceive","items":[{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"}]},{"tactic":"Model","items":[{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"}]}]},"affected":[{"vendor":"alpine","product":"lighttpd","name":"lighttpd","label":"lighttpd","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/lighttpd","purlType":"apk","source":null,"versions":[{"text":"< 1.4.76-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.76-r0","eol":null},{"vendor":"alpine","product":"xz","name":"xz","label":"xz","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/xz","purlType":"apk","source":null,"versions":[{"text":"< 5.6.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.6.1-r2","eol":null},{"vendor":"chainguard","product":"openssh","name":"openssh","label":"openssh","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openssh","purlType":"apk","source":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null},{"vendor":"chainguard","product":"xz","name":"xz","label":"xz","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/xz","purlType":"apk","source":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null},{"vendor":"wolfi","product":"openssh","name":"openssh","label":"openssh","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openssh","purlType":"apk","source":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null},{"vendor":"wolfi","product":"xz","name":"xz","label":"xz","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/xz","purlType":"apk","source":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null},{"vendor":"debian","product":"xz-utils","name":"xz-utils","label":"xz-utils","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/xz-utils","purlType":"deb","source":null,"versions":[{"text":"< 5.6.1+really5.4.5-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.6.1+really5.4.5-1","eol":null},{"vendor":"ubuntu","product":"xz-utils","name":"xz-utils","label":"xz-utils","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/xz-utils","purlType":"deb","source":null,"versions":[{"text":"< 5.2.4-1ubuntu1.1","noFixRecorded":false,"fixedIn":null},{"text":"< 5.2.5-2ubuntu1","noFixRecorded":false,"fixedIn":null},{"text":"< 5.4.5-0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.4-1ubuntu1.1 | < 5.2.5-2ubuntu1 | < 5.4.5-0.3","eol":null},{"vendor":"opensuse","product":"xz&distro=openSUSE Tumbleweed","name":"xz","label":"xz&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/xz&distro=openSUSE Tumbleweed","purlType":"rpm","source":null,"versions":[{"text":"< 5.6.2-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.6.2-1.1","eol":null},{"vendor":"tukaani","product":"xz","name":"xz","label":"xz","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"source":null,"versions":[{"text":"5.6.0","noFixRecorded":false,"fixedIn":null},{"text":"5.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.6.0 | 5.6.1","eol":null}],"affectedCount":10,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/security/cve/CVE-2024-3094","label":"access.redhat.com/security/cve/CVE-2024-3094","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","Advisory","Vendor Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272210","label":"bugzilla.redhat.com/show_bug.cgi?id=2272210","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","REPORT","Vendor Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://www.openwall.com/lists/oss-security/2024/03/29/4","label":"www.openwall.com/lists/oss-security/2024/03/29/4","hostname":"www.openwall.com","tags":["REPORT","WEB","Mailing List"],"sources":["cve.org","osv_ubuntu","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users","label":"www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users","hostname":"www.redhat.com","tags":["ARTICLE","Vendor Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://www.binarly.io/blog/persistent-risk-xz-utils-backdoor-still-lurking-in-docker-images","label":"www.binarly.io/blog/persistent-risk-xz-utils-backdoor-still-lurking-in-docker-images","hostname":"www.binarly.io","tags":["ARTICLE"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://ariadne.space/2024/04/02/the-xz-utils-backdoor-is-a-symptom-of-a-larger-problem/","label":"ariadne.space/2024/04/02/the-xz-utils-backdoor-is-a-symptom-of-a-larger-problem/","hostname":"ariadne.space","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/","label":"arstechnica.com/security/…","hostname":"arstechnica.com","tags":["X Transferred","WEB","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://aws.amazon.com/security/security-bulletins/AWS-2024-002/","label":"aws.amazon.com/security/security-bulletins/AWS-2024-002/","hostname":"aws.amazon.com","tags":["X Transferred","WEB","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://blog.netbsd.org/tnf/entry/statement_on_backdoor_in_xz","label":"blog.netbsd.org/tnf/entry/statement_on_backdoor_in_xz","hostname":"blog.netbsd.org","tags":["X Transferred","ARTICLE"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://boehs.org/node/everything-i-know-about-the-xz-backdoor","label":"boehs.org/node/everything-i-know-about-the-xz-backdoor","hostname":"boehs.org","tags":["X Transferred","WEB","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068024","label":"bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068024","hostname":"bugs.debian.org","tags":["X Transferred","WEB","Mailing List","Vendor Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://bugs.gentoo.org/928134","label":"bugs.gentoo.org/928134","hostname":"bugs.gentoo.org","tags":["X Transferred","WEB","Issue Tracking","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1222124","label":"bugzilla.suse.com/show_bug.cgi?id=1222124","hostname":"bugzilla.suse.com","tags":["X Transferred","REPORT","Issue Tracking","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://discourse.nixos.org/t/cve-2024-3094-malicious-code-in-xz-5-6-0-and-5-6-1-tarballs/42405","label":"discourse.nixos.org/t/cve-2024-3094-malicious-code-in-xz-5-6-0-and-5-6-1-tarballs/42405","hostname":"discourse.nixos.org","tags":["X Transferred","WEB","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27","label":"gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27","hostname":"gist.github.com","tags":["X Transferred","WEB","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://github.com/advisories/GHSA-rxwq-x6h5-x525","label":"github.com/advisories/GHSA-rxwq-x6h5-x525","hostname":"github.com","tags":["X Transferred","Advisory","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://github.com/amlweems/xzbot","label":"github.com/amlweems/xzbot","hostname":"github.com","tags":["X Transferred","PACKAGE"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://github.com/karcherm/xz-malware","label":"github.com/karcherm/xz-malware","hostname":"github.com","tags":["X Transferred","PACKAGE","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://gynvael.coldwind.pl/?lang=en&id=782","label":"gynvael.coldwind.pl?lang=en&id=782","hostname":"gynvael.coldwind.pl","tags":["X Transferred","WEB","Technical Description","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://lists.debian.org/debian-security-announce/2024/msg00057.html","label":"lists.debian.org/debian-security-announce/2024/msg00057.html","hostname":"lists.debian.org","tags":["X Transferred","WEB","Mailing List","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://lists.freebsd.org/archives/freebsd-security/2024-March/000248.html","label":"lists.freebsd.org/archives/freebsd-security/2024-March/000248.html","hostname":"lists.freebsd.org","tags":["X Transferred","WEB","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://lwn.net/Articles/967180/","label":"lwn.net/Articles/967180/","hostname":"lwn.net","tags":["X Transferred","WEB","Issue Tracking","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://news.ycombinator.com/item?id=39865810","label":"news.ycombinator.com/item?id=39865810","hostname":"news.ycombinator.com","tags":["X Transferred","WEB","Issue Tracking","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://news.ycombinator.com/item?id=39877267","label":"news.ycombinator.com/item?id=39877267","hostname":"news.ycombinator.com","tags":["X Transferred","WEB","Issue Tracking"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://news.ycombinator.com/item?id=39895344","label":"news.ycombinator.com/item?id=39895344","hostname":"news.ycombinator.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://openssf.org/blog/2024/03/30/xz-backdoor-cve-2024-3094/","label":"openssf.org/blog/2024/03/30/xz-backdoor-cve-2024-3094/","hostname":"openssf.org","tags":["X Transferred","ARTICLE","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://research.swtch.com/xz-script","label":"research.swtch.com/xz-script","hostname":"research.swtch.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://research.swtch.com/xz-timeline","label":"research.swtch.com/xz-timeline","hostname":"research.swtch.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-3094","label":"security-tracker.debian.org/tracker/CVE-2024-3094","hostname":"security-tracker.debian.org","tags":["X Transferred","Advisory","WEB","Third Party Advisory"],"sources":["cve.org","osv_debian","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-3094","label":"security.alpinelinux.org/vuln/CVE-2024-3094","hostname":"security.alpinelinux.org","tags":["X Transferred","Advisory","WEB","Third Party Advisory"],"sources":["cve.org","osv_alpine","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://security.archlinux.org/CVE-2024-3094","label":"security.archlinux.org/CVE-2024-3094","hostname":"security.archlinux.org","tags":["X Transferred","WEB","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://security.netapp.com/advisory/ntap-20240402-0001/","label":"security.netapp.com/advisory/ntap-20240402-0001/","hostname":"security.netapp.com","tags":["X Transferred","Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://tukaani.org/xz-backdoor/","label":"tukaani.org/xz-backdoor/","hostname":"tukaani.org","tags":["X Transferred","WEB","Issue Tracking","Vendor Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://twitter.com/LetsDefendIO/status/1774804387417751958","label":"twitter.com/LetsDefendIO/status/1774804387417751958","hostname":"twitter.com","tags":["X Transferred","WEB","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://twitter.com/debian/status/1774219194638409898","label":"twitter.com/debian/status/1774219194638409898","hostname":"twitter.com","tags":["X Transferred","WEB","Press/Media Coverage"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://twitter.com/infosecb/status/1774595540233167206","label":"twitter.com/infosecb/status/1774595540233167206","hostname":"twitter.com","tags":["X Transferred","WEB","Press/Media Coverage"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://twitter.com/infosecb/status/1774597228864139400","label":"twitter.com/infosecb/status/1774597228864139400","hostname":"twitter.com","tags":["X Transferred","WEB","Press/Media Coverage"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://ubuntu.com/security/CVE-2024-3094","label":"ubuntu.com/security/CVE-2024-3094","hostname":"ubuntu.com","tags":["X Transferred","REPORT","WEB","Third Party Advisory"],"sources":["cve.org","osv_ubuntu","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094","label":"www.cisa.gov/news-events/…","hostname":"www.cisa.gov","tags":["X Transferred","WEB","Third Party Advisory","US Government Resource"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://www.darkreading.com/vulnerabilities-threats/are-you-affected-by-the-backdoor-in-xz-utils","label":"www.darkreading.com/vulnerabilities-threats/are-you-affected-by-the-backdoor-in-xz-utils","hostname":"www.darkreading.com","tags":["X Transferred","WEB","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://www.kali.org/blog/about-the-xz-backdoor/","label":"www.kali.org/blog/about-the-xz-backdoor/","hostname":"www.kali.org","tags":["X Transferred","ARTICLE"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://www.tenable.com/blog/frequently-asked-questions-cve-2024-3094-supply-chain-backdoor-in-xz-utils","label":"www.tenable.com/blog/frequently-asked-questions-cve-2024-3094-supply-chain-backdoor-in-xz-utils","hostname":"www.tenable.com","tags":["X Transferred","ARTICLE","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://www.theregister.com/2024/03/29/malicious_backdoor_xz/","label":"www.theregister.com/2024/03/29/malicious_backdoor_xz/","hostname":"www.theregister.com","tags":["X Transferred","WEB","Press/Media Coverage"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://www.vicarius.io/vsociety/vulnerabilities/cve-2024-3094","label":"www.vicarius.io/vsociety/vulnerabilities/cve-2024-3094","hostname":"www.vicarius.io","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://xeiaso.net/notes/2024/xz-vuln/","label":"xeiaso.net/notes/2024/xz-vuln/","hostname":"xeiaso.net","tags":["X Transferred","WEB","Third Party Advisory"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/30/12","label":"www.openwall.com/lists/oss-security/2024/03/30/12","hostname":"www.openwall.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/30/27","label":"www.openwall.com/lists/oss-security/2024/03/30/27","hostname":"www.openwall.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/29/12","label":"www.openwall.com/lists/oss-security/2024/03/29/12","hostname":"www.openwall.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/29/10","label":"www.openwall.com/lists/oss-security/2024/03/29/10","hostname":"www.openwall.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/30/36","label":"www.openwall.com/lists/oss-security/2024/03/30/36","hostname":"www.openwall.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"http://www.openwall.com/lists/oss-security/2024/04/16/5","label":"www.openwall.com/lists/oss-security/2024/04/16/5","hostname":"www.openwall.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/29/8","label":"www.openwall.com/lists/oss-security/2024/03/29/8","hostname":"www.openwall.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/30/5","label":"www.openwall.com/lists/oss-security/2024/03/30/5","hostname":"www.openwall.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/29/5","label":"www.openwall.com/lists/oss-security/2024/03/29/5","hostname":"www.openwall.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/29/4","label":"www.openwall.com/lists/oss-security/2024/03/29/4","hostname":"www.openwall.com","tags":["X Transferred","WEB"],"sources":["cve.org","osv_wolfi","osv_chainguard","nvd"]},{"url":"https://discourse.ubuntu.com/t/xz-liblzma-security-update/43714","label":"discourse.ubuntu.com/t/xz-liblzma-security-update/43714","hostname":"discourse.ubuntu.com","tags":["REPORT"],"sources":["osv_ubuntu"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3094","label":"www.cve.org/CVERecord?id=CVE-2024-3094","hostname":"www.cve.org","tags":["REPORT"],"sources":["osv_ubuntu"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","label":"access.redhat.com/downloads/content/package-browser/","hostname":"access.redhat.com","tags":["WEB"],"sources":["osv_wolfi","osv_chainguard"]},{"url":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","label":"access.redhat.com/jbossnetwork/restricted/listSoftware.html","hostname":"access.redhat.com","tags":["WEB"],"sources":["osv_wolfi","osv_chainguard"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/3xxx/CVE-2024-3094.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2024/3xxx/CVE-2024-3094.json","hostname":"github.com","tags":["Advisory"],"sources":["osv_wolfi","osv_chainguard"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3094","label":"nvd.nist.gov/vuln/detail/CVE-2024-3094","hostname":"nvd.nist.gov","tags":["Advisory"],"sources":["osv_wolfi","osv_chainguard"]},{"url":"https://github.com/tukaani-project/xz","label":"github.com/tukaani-project/xz","hostname":"github.com","tags":["PACKAGE"],"sources":["osv_wolfi","osv_chainguard"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3094","label":"www.suse.com/security/cve/CVE-2024-3094","hostname":"www.suse.com","tags":["WEB"],"sources":["osv_opensuse"]}],"droppedReferenceCount":0,"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-3R9W-5X9C-PWR7","CGA-8CRC-R3GG-JR73","CGA-XP9G-W4GQ-2V78"]},"timeline":[{"kind":"published","date":"2024-03-29T16:51:12.588Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-04T07:05:54.671Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"default","profileName":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10},"appliedRules":["high-cvss-alone"]},"warnings":[],"meta":{"dataAsOf":"2026-10-14T22:40:30.922Z","stale":false,"partial":false}}