News for hackers. Stuff that matters.

A comment on Xzbot: Notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094). Parent comment

Re:Xzbot: Notes, honeypot, and exploit demo for the xz backd... by asveikau on Monday April 01, 2024 @05:03PM (#39899304)
Reading that link, it seems like the vulnerability is that a file name gets printed, so you can add terminal control characters in a file name and have it printed.

https://github.com/libarchive/libarchive/pull/1609#issuecomm...

[ Parent | on HN ]

There are no comments on this comment yet.