Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution
The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has revealed.
The audacious supply chain compromise, tracked as CVE-2024-3094 (CVSS score: 10.0), came to light last week when Microsoft engineer and PostgreSQL developer Andres Freund
The post “Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution” appeared first on The Hacker News
Source:The Hacker News – [email protected] (The Hacker News)