CVE-2024-3094 PoC — xz 安全漏洞

介绍

# xz-utils Vulnerability Check and Update Utility

This script is designed to check for vulnerabilities in the installed version of xz-utils on your system. If a vulnerable version is detected, the script offers to automatically download and install a stable version to mitigate potential security risks.

## Requirements

The following components are necessary for the script to run:
- Python 3
- `requests` library (can be installed via `pip install requests`)
- `tarfile` library (included with Python 3)
- Internet access for downloading the stable version archive

## Features

- Automatically detects the installed version of xz-utils.
- Checks against a list of known vulnerable versions.
- Downloads and installs a stable version if a vulnerable version is detected.
- Cleans up downloaded archives after installation.

## How to Use

1. Ensure Python 3 is installed on your system.
2. Clone this repository or download the script directly.
3. Install the required Python libraries using `pip install -r requirements.txt` (ensure you have `requests` library installed).
4. Run the script with `python check_xz_vulnerability.py`.
5. If a vulnerable version is detected, follow the prompts to install the stable version.

## Note

This script requires administrative privileges to install the new version of xz-utils. You may be prompted for your password if necessary.

## Disclaimer

This script is provided "as is", without warranty of any kind. Use it at your own risk. The authors are not responsible for any damage or issues that may arise from using this script.

## Contribution

Contributions are welcome. Please create a pull request or open an issue for any bugs or feature requests.

## License

This project is licensed under the MIT License - see the LICENSE file for details.

文件快照

备注