XZ/Liblzma Backdoor – CVE-2024-3094 – Product Status

Advisory ID CVE Number Date discovered Severity Advisory revision
STORM-2024-019 CVE-2024-3094 03/29/2024 low v1

Vulnerability details

This advisory provides status of all Stormshield products against the XZ/Liblzma Backdoor – CVE-2024-3094

Product Impact Comment
Stormshield Network Security (SNS) Not Impacted The product is not impacted in any of its versions
Stormshield Data Security (SDS) Not Impacted The product is not impacted in any of its versions
Stormshield Endpoint Security (SES) Not Impacted The product is not impacted in any of its versions
Stormshield Management Center (SMC) Not Impacted The product is not impacted in any of its versions
Stormshield Visibility Center (SVC) Not Impacted The product is not impacted in any of its versions
Stormshield Log Supervisor (SLS) Not Impacted The product is not impacted in any of its versions
SNCM V1.6 Not Impacted The product is not impacted in any of its versions
SNCM V2.0 Not Impacted The product is not impacted in any of its versions
SSL VPN Client Not Impacted The product is not impacted in any of its versions
SSO Agent Not Impacted The product is not impacted in any of its versions
Certified IPSec Client Not Impacted The product is not impacted in any of its versions
SNS Python API Not Impacted The product is not impacted in any of its versions

 

Impacted products

ProductsSeverityDetail

Revisions

Version Date Description
v1 04/02/2024 Initial release