https://krash.dev/tags/backdoor/Recent content in Backdoor on krash.devHugoen-usFri, 14 Aug 2026 08:29:09 +0530https://krash.dev/posts/xz-vulnerability/Mon, 01 Apr 2024 00:00:00 +0000https://krash.dev/posts/xz-vulnerability/<table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td>GitHub Repository</td> <td><a href="https://github.com/tukaani-project/xz/releases/tag/v5.6.0" target="_blank" rel="noopener noreferrer">xz (Suspended)</a></td> </tr> <tr> <td>Source Code</td> <td><a href="https://git.tukaani.org/?p=xz.git" target="_blank" rel="noopener noreferrer">https://git.tukaani.org/?p=xz.git</a></td> </tr> <tr> <td>Threat Actor</td> <td><a href="https://github.com/JiaT75" target="_blank" rel="noopener noreferrer">Jia Tan (GitHub)</a></td> </tr> <tr> <td>CVE Number</td> <td><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-3094" target="_blank" rel="noopener noreferrer">CVE-2024-3094 (CVSS 10.0)</a></td> </tr> <tr> <td>Vulnerability Type</td> <td>Remote Code Execution</td> </tr> <tr> <td>Attack Category</td> <td>Social Engineering, Supply Chain Attack</td> </tr> </tbody> </table> <h1 id="what-does-xz-module-do">What does <code>xz</code> module do?<a class="heading-anchor" href="#what-does-xz-module-do" aria-label="Link to this section">#</a> </h1> <p>XZ Utils is a set of free and open-source data compression utilities that provide high compression ratios and fast decompression. It primarily uses the <a href="https://en.wikipedia.org/wiki/Lempel%E2%80%93Ziv%E2%80%93Markov_chain_algorithm" target="_blank" rel="noopener noreferrer">LZMA compression algorithm</a> , which is an algorithm for lossless data compression.</p>