POC详情: 67ff71b929153970995213ba4d27585daafc5ec0

来源
关联漏洞
标题: xz 安全漏洞 (CVE-2024-3094)
描述:xz是一个应用软件。用于支持读取和写入xz压缩流。 XZ Utils 5.6.0版本和5.6.1版本存在安全漏洞,该漏洞源于允许攻击者嵌入恶意代码。
介绍
# xz-utils Vulnerability Check and Update Utility

This script is designed to check for vulnerabilities in the installed version of xz-utils on your system. If a vulnerable version is detected, the script offers to automatically download and install a stable version to mitigate potential security risks.

## Requirements

The following components are necessary for the script to run:
- Python 3
- `requests` library (can be installed via `pip install requests`)
- `tarfile` library (included with Python 3)
- Internet access for downloading the stable version archive

## Features

- Automatically detects the installed version of xz-utils.
- Checks against a list of known vulnerable versions.
- Downloads and installs a stable version if a vulnerable version is detected.
- Cleans up downloaded archives after installation.

## How to Use

1. Ensure Python 3 is installed on your system.
2. Clone this repository or download the script directly.
3. Install the required Python libraries using `pip install -r requirements.txt` (ensure you have `requests` library installed).
4. Run the script with `python check_xz_vulnerability.py`.
5. If a vulnerable version is detected, follow the prompts to install the stable version.

## Note

This script requires administrative privileges to install the new version of xz-utils. You may be prompted for your password if necessary.

## Disclaimer

This script is provided "as is", without warranty of any kind. Use it at your own risk. The authors are not responsible for any damage or issues that may arise from using this script.

## Contribution

Contributions are welcome. Please create a pull request or open an issue for any bugs or feature requests.

## License

This project is licensed under the MIT License - see the LICENSE file for details.
文件快照

[4.0K] /data/pocs/67ff71b929153970995213ba4d27585daafc5ec0 ├── [2.8K] CVE-2024-3094-checker.py ├── [1.8K] README.md └── [ 19] requirements.txt 0 directories, 3 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问,请发送邮箱到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
    3. 神龙已为您对POC代码进行快照,为了长期维护,请考虑为本地POC付费,感谢您的支持。