Approved changes feed: RSS · Atom

cpe:2.3:o:nixos:nixos:24.11:*:*:*:*:*:*:*

part: o version: 24.11 update: *

VendorNixos (2917cc6e-b353-5707-9e0c-199be0cdbad8)
ProductNixos (a094e4d6-6006-565a-842d-f8020889a10e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/nixos/nixpkgs purl2cpe 2026-06-01 10:16:08.444339

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12084 vulnerable 2026-06-08 06:23:51.144659 Rsync: heap buffer overflow in rsync due to improper checksum length handling
CRITICAL (9.8)
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
Published: 2025-01-15T14:16:35.363Z
Updated: 2026-06-29T20:31:56.456Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.