Malwarehigh
Malicious backdoor code embedded in popular Linux tool, CISA and Red Hat warn
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-3094 | Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0 | 10.0 | 86% |
From the original article
2 min read at therecord.media
The software company Red Hat and the nation’s top cybersecurity agency released a Good Friday warning about malicious code being embedded in a popular Linux tool. The issue — tagged as CVE-2024-3094 — affects XZ Utils, a tool that helps compress large file formats into smaller more manageable ones for sharing via file transfer. The tool is present in nearly every Linux distribution, according to Red Hat.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.