XZ CVE-2024-3094 Vulnerability Audit
Software VulnerabilityDiscover which Linux assets have a vulnerable version on XZ running on it that is vulnerable to CVE-2024-3094. This vulnerability is a malicious injection present in the xz versions 5.6.0 and 5.6.1 libraries is only included in the tarball download package. Red Hat warns that any Linux distribution can be at risk as long as it runs the compromised XZ versions.
The report below will provide you with a full list of XZ installations and libraries along with the version so you can quickly identify if you are vulnerable. You can find more info in the XZ vulnerability blog.
Run The XZ CVE-2024-3094 Vulnerability Audit Report Now!
XZ CVE-2024-3094 Lansweeper On-Prem Query
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
subquery1.softwareName,
subquery1.Cleaned_Version as [Cleaned Version],
subquery1.Version,
Case when Try_Cast(ParseName(subquery1.Cleaned_Version, 3) As bigint) = 5 and Try_Cast(ParseName(subquery1.Cleaned_Version, 2) As bigint) = 6 and Try_Cast(ParseName(subquery1.Cleaned_Version, 1) As bigint) in (0,1) then 'Vulnerable' else 'Not Vulnerable' end as [Vulnerable],
tblLinuxSystem.OSRelease As OS,
tblAssets.Domain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblLinuxSystem On tblAssets.AssetID = tblLinuxSystem.AssetID
left join (
select tblLinuxSoftware.assetid,
CASE WHEN CHARINDEX('-', tblLinuxSoftware.Version) > 0 THEN SUBSTRING(tblLinuxSoftware.Version, 1, CHARINDEX('-', tblLinuxSoftware.Version) - 1)
ELSE tblLinuxSoftware.Version
END AS Cleaned_Version,
tblSoftwareUni.softwareName,
tblLinuxSoftware.Version
from tblLinuxSoftware
Inner Join tblSoftwareUni On
tblSoftwareUni.SoftID = tblLinuxSoftware.SoftwareUniID
) as subquery1 on subquery1.assetid= tblassets.assetid
Where tsysAssetTypes.AssetTypename = 'Linux' And tblState.Statename = 'Active' and (softwareName = 'xz' or softwareName = 'xz-utils' or softwareName = 'xz-libs')
Order By subquery1.Cleaned_Version desc,
tblAssets.IPNumeric,
tblAssets.Domain,
tblAssets.AssetName