[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f67XbQjzrdgQ1a4ujggmzjHi5ttHOzZd9gEbF3CCxaNg":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":42,"kevVulnerabilities":101,"topProductsByCves":102,"seoMetadata":108,"meta":117},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":41},21830,"nixos",5,15,0,258,"2025-08-12","n",[16,21,24,30,36],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},119402,22,6,"2025-01-15",{"id":22,"product_name":23,"version_count":11,"cve_count":9,"kev_count":11,"last_cve_update":13},119400,"hydra",{"id":25,"product_name":26,"version_count":27,"cve_count":28,"kev_count":11,"last_cve_update":29},119401,"nix",184,3,"2024-09-10",{"id":31,"product_name":32,"version_count":33,"cve_count":34,"kev_count":11,"last_cve_update":35},119399,"calamares-nixos-extensions",25,1,"2023-06-29",{"id":37,"product_name":38,"version_count":39,"cve_count":11,"kev_count":11,"last_cve_update":40},119403,"patchelf",27,null,"Nixos is a technology vendor with 5 tracked products and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[43,51,58,64,68,73,78,83,89,95],{"cveId":44,"description":45,"publishedDate":20,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":49,"epssScore":50},"CVE-2024-12084","A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.",9.8,"v3.1","Critical",false,0.72059,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":47,"severity":56,"isKev":49,"epssScore":57},"CVE-2024-12085","A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","2025-01-14",7.5,"High",0.08823,{"cveId":59,"description":60,"publishedDate":54,"cvssScore":61,"cvssVersion":47,"severity":62,"isKev":49,"epssScore":63},"CVE-2024-12088","A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.",6.5,"Medium",0.04745,{"cveId":65,"description":66,"publishedDate":54,"cvssScore":61,"cvssVersion":47,"severity":62,"isKev":49,"epssScore":67},"CVE-2024-12087","A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories\u002Fpaths on the client.",0.02307,{"cveId":69,"description":70,"publishedDate":54,"cvssScore":71,"cvssVersion":47,"severity":62,"isKev":49,"epssScore":72},"CVE-2024-12086","A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.",6.1,0.01827,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":55,"cvssVersion":47,"severity":56,"isKev":49,"epssScore":77},"CVE-2024-45049","Hydra is a Continuous Integration service for Nix based projects. It is possible to trigger evaluations in Hydra without any authentication. Depending on the size of evaluations, this can impact the availability of systems. The problem can be fixed by applying https:\u002F\u002Fgithub.com\u002FNixOS\u002Fhydra\u002Fcommit\u002Ff73043378907c2c7e44f633ad764c8bdd1c947d5 to any Hydra package. Users are advised to upgrade. Users unable to upgrade should deny the `\u002Fapi\u002Fpush` route in a reverse proxy. This also breaks the \"Evaluate jobset\" button in the frontend.","2024-08-27",0.00619,{"cveId":79,"description":80,"publishedDate":29,"cvssScore":81,"cvssVersion":47,"severity":48,"isKev":49,"epssScore":82},"CVE-2024-45593","Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the Nix process has access. This will be with root permissions when using the Nix daemon. This issue is fixed in Nix 2.24.6.",9,0.00602,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":47,"severity":62,"isKev":49,"epssScore":88},"CVE-2024-27297","Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host (or another fixed-output derivation) via Unix domain sockets in the abstract namespace. This allows to modify the output of the derivation, after Nix has registered the path as \"valid\" and immutable in the Nix database. In particular, this allows the output of fixed-output derivations to be modified from their expected content. This issue has been addressed in versions 2.3.18 2.18.2 2.19.4 and 2.20.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.","2024-03-11",6.3,0.00586,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":47,"severity":62,"isKev":49,"epssScore":94},"CVE-2024-32657","Hydra is a Continuous Integration service for Nix based projects. Attackers can execute arbitrary code in the browser context of Hydra and execute authenticated HTTP requests. The abused feature allows Nix builds to specify files that Hydra serves to clients. One use of this functionality is serving NixOS `.iso` files. The issue is only with html files served by Hydra. The issue has been patched on https:\u002F\u002Fhydra.nixos.org around 2024-04-21 14:30 UTC. The nixpkgs package were fixed in unstable and 23.11. Users with custom Hydra packages can apply the fix commit to their local installations. The vulnerability is only triggered when opening HTML build artifacts, so not opening them until the vulnerability is fixed works around the issue.","2024-04-22",4.6,0.00467,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":47,"severity":56,"isKev":49,"epssScore":100},"CVE-2019-17365","Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable.","2019-10-09",7.8,0.00433,[],[103,104,105,106,107],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},{"id":22,"product_name":23,"version_count":11,"cve_count":9,"kev_count":11,"last_cve_update":13},{"id":25,"product_name":26,"version_count":27,"cve_count":28,"kev_count":11,"last_cve_update":29},{"id":31,"product_name":32,"version_count":33,"cve_count":34,"kev_count":11,"last_cve_update":35},{"id":37,"product_name":38,"version_count":39,"cve_count":11,"kev_count":11,"last_cve_update":40},{"title":109,"metaDescription":110,"keywords":111,"structuredData":112},"Nixos - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nixos covering 5 products with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Nixos vulnerabilities, Nixos security, Nixos CVE, Nixos threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":113,"@type":114,"name":115,"description":110,"url":116},"https:\u002F\u002Fschema.org","Organization","Nixos","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnixos",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":118,"apiVersion":119},"2026-10-17T20:40:47.307Z","3.0"]