CVE-2024-3094

概要

参考情報

• access.redhat.com/security/cve/CVE-2024-3094 · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• openwall.com/lists/oss-security/2024/03/29/4 · Mailing List
• redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users · Vendor Advisory
• openwall.com/lists/oss-security/2024/03/29/10
• openwall.com/lists/oss-security/2024/03/29/12
• openwall.com/lists/oss-security/2024/03/29/4
• openwall.com/lists/oss-security/2024/03/29/5
• openwall.com/lists/oss-security/2024/03/29/8
• openwall.com/lists/oss-security/2024/03/30/12
• openwall.com/lists/oss-security/2024/03/30/27
• openwall.com/lists/oss-security/2024/03/30/36

xz のその他の脆弱性

• CVE-2026-34743中 5.3XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was use…
• CVE-2020-22916中 5.5An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file. NOTE: the vendor disputes…
• CVE-2022-1271高 8.8An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for e…
• CVE-2015-4035高 7.8scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote…