Approved changes feed: RSS · Atom
cpe:2.3:o:nixos:nix:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Nixos (2917cc6e-b353-5707-9e0c-199be0cdbad8) |
|---|---|
| Product | Nix (63dc03e1-73ce-5b09-a3f8-282bffca63ac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/nix |
purl2cpe | 2026-06-01 10:16:08.428717 |
pkg:deb/ubuntu/nix |
purl2cpe | 2026-06-01 10:16:08.428719 |
pkg:github/nixos/nix |
purl2cpe | 2026-06-01 10:16:08.428721 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45593 |
vulnerable | 2026-06-08 06:48:08.702241 |
Nix affected by unsafe NAR unpacking
CRITICAL (9.1)
Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the Nix process has access. This will be with root permissions when using the Nix daemon. This issue is fixed in Nix 2.24.6.
Published: 2024-09-10T15:51:07.881Z
Updated: 2024-09-10T16:06:16.016Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17365 |
vulnerable | 2026-06-08 05:13:10.362736 |
Details available
Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable.
Published: 2019-10-09T21:19:13.000Z
Updated: 2024-08-05T01:40:15.250Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.