high
advisory
CVE-2024-3094: Vulnerability Information
CVE-2024-3094 affects Tukaani Xz versions 5.6.0 and 5.6.1. Public detection scripts are available.
CVE search metadata
CVE search record: CVE-2024-3094. Severity: critical. CVSS: 10.0. EPSS: 90.90%. KEV: no. Product: Tukaani Xz (5.6.0, 5.6.1). Brief: CVE-2024-3094: Vulnerability Information. Brief link: https://feed.craftedsignal.io/briefs/2026-10-cve-2024-3094/
Triage facts
Revision 1- Applicability
- Tukaani Xz (5.6.0, 5.6.1)
- Evidence
- Unknown
- Severity
- High
- Sources
- 2 public sources
- Freshness
- Revision 1Oct 27, 00:09 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C3Roughly even chance
CVE-2024-3094 is a high-severity vulnerability (CVSS 10.0) affecting Tukaani Xz versions 5.6.0 and 5.6.1. The attack vector is defined as network-based with low attack complexity. Publicly available scripts for detecting this vulnerability on the SSH binary have been published.
Technical Details
- CVSS: 10.0
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- EPSS Score: 90.9%