/tag

Cve 2024 3094

1 matching post.

All tags
Vulnerability Research Sep 9, 2024 7 min read

Anatomy of a Supply Chain Kill Chain: The xz Utils Backdoor (CVE-2024-3094)

How build-system manipulation and IFUNC hijacking turned a compression library into an SSH implant.

#supply-chain#backdoor#cve-2024-3094#linux#openssh#build-security