{"uuid": "0ce9d284-d2dd-42e5-a894-97c6fe100f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3094", "type": "seen", "source": "https://t.me/KomunitiSiber/1724", "content": "Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution\nhttps://thehackernews.com/2024/04/malicious-code-in-xz-utils-for-linux.html\n\nThe malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has revealed.\nThe audacious supply chain compromise, tracked as\u00a0CVE-2024-3094\u00a0(CVSS score: 10.0), came to light last week when Microsoft engineer and PostgreSQL developer Andres Freund", "creation_timestamp": "2024-04-02T16:16:50.000000Z"}