Skip to content

Instantly share code, notes, and snippets.

@flrichar
Last active April 1, 2024 16:38
Show Gist options
  • Save flrichar/00568013bc62cc3c8d670b736f4ed61e to your computer and use it in GitHub Desktop.
Save flrichar/00568013bc62cc3c8d670b736f4ed61e to your computer and use it in GitHub Desktop.
cve-2024-3094 detection

Run as root ...

... or readlink might require a flag like -f and/or the which command might not include root's $PATH so perhaps run under sudo.

This is a little hacky. A better bet for your operations might be Neuvector.

readlink $(awk '/liblzma.so.5/{print $3}' <(ldd $(which sshd))) | grep -qE "liblzma.so.5.6.0|liblzma.so.5.6.1" && echo "Affected by CVE-2024-3094" || echo "Not affected."
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment