Unverified50% confidenceFactExact time
xz后门通过修改liblzma库的IFUNC解析机制，能在特定条件下劫持通过systemd链接liblzma的OpenSSH服务器的RSA签名验证过程
1
Sources
50%
Confidence
Long-term
Relevance
8/21/2026
First Seen
Sources
Related Claims
UnverifiedXZ Utils 后门本质上是一个可在 SSH 认证过程中执行任意命令的远程代码执行（RCE）漏洞71% similarUnverifiedXZ Utils 后门的恶意代码隐藏在测试用二进制文件中，通过修改后的 m4 构建脚本在编译时提取注入，并通过劫持 RSA_public_decrypt 函数检查特定公钥68% similarUnverifiedxz-utils工具被广泛用于Linux系统的SSH认证链路中，若后门未被及时发现可能影响全球数百万台Linux服务器65% similarUnverifiedBy default, the Codex plugin's adversarial review only scanned the file responsible for user login in the project, completely ignoring SQL injection, SSRF, and other risks in other folders within the same repository.57% similarUnverified极验w值的加密数据经过AES、RSA、自定义XOR变换等组合方式混合而成57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/783930API
curl https://kongchang.com/api/v1/knowledge/claims/783930MCP
get_claim(id=783930)