CVE-2024-3094: exploitation status and patch state
CVE-2024-3094 · CVSS 10.0 CRITICAL · EPSS 86%
Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0.
Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.
Is CVE-2024-3094 exploited?
Not in the CISA KEV catalog.
EPSS puts exploitation in the next 30 days at 86%.
Public exploit code: none found in monitored sources.
Which products and versions are affected?
Red Hat · Red Hat Enterprise Linux 10
Red Hat · Red Hat Enterprise Linux 6
Red Hat · Red Hat Enterprise Linux 7
Red Hat · Red Hat Enterprise Linux 8
Red Hat · Red Hat Enterprise Linux 9
Red Hat · Red Hat JBoss Enterprise Application Platform 8