Tukaani Xz (5.6.0, 5.6.1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/tukaani-xz-5.6.0-5.6.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 00:09:15 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgCVE-2024-3094: Vulnerability Informationhttps://feed.craftedsignal.io/briefs/2026-10-cve-2024-3094/Tue, 27 Oct 2026 00:09:15 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-cve-2024-3094/CVE-2024-3094 affects Tukaani Xz versions 5.6.0 and 5.6.1. Public detection scripts are available.CVE-2024-3094 is a high-severity vulnerability (CVSS 10.0) affecting Tukaani Xz versions 5.6.0 and 5.6.1. The attack vector is defined as network-based with low attack complexity. Publicly available scripts for detecting this vulnerability on the SSH binary have been published.

Technical Details

  • CVSS: 10.0
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
  • EPSS Score: 90.9%
]]>highadvisory