NixOS kayıtları
nixos üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %5,6
- Silahlaştırılmış
- 1 · %5,6
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %44,4
- Yayından KEV’e ortanca
- 9 gün
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-306 Missing Authentication for Critical Function2
- CWE-276 Incorrect Default Permissions1
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
- CWE-390 Detection of Error Condition Without Action1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
62Bu hafta | CVE-2026-31431Silahlaştırılmış | crypto: algif_aead - Revert to operating out-of-placelinux · linux kernel · CWE-669 | Yüksek7,8 | KEV | %3,4 | 22 Nis 2026 |
61Bu hafta | CVE-2024-12084Kavram kanıtı | Rsync: heap buffer overflow in rsync due to improper checksum length handlingsamba · rsync · CWE-122 | Kritik9,8 | — | %72,1 | 15 Oca 2025 |
35İzleyin | CVE-2024-45593İstismar yok | Nix affected by unsafe NAR unpackingnixos · nix · CWE-22 | Yüksek8,8 | — | %0,6 | 10 Eyl 2024 |
33İzleyin | CVE-2024-12085Kavram kanıtı | Rsync: info leak via uninitialized stack contentssamba · rsync · CWE-908 | Yüksek7,5 | — | %8,8 | 14 Oca 2025 |
33İzleyin | CVE-2026-39860İstismar yok | Nix sandbox escape: file write via symlink at FOD `.tmp` copy destinationlinux · linux kernel · CWE-61 | Yüksek8,4 | — | %0,2 | 8 Nis 2026 |
31İzleyin | CVE-2024-12088İstismar yok | Rsync: --safe-links option bypass leads to path traversalsamba · rsync · CWE-22 | Yüksek7,5 | — | %4,7 | 14 Oca 2025 |
31İzleyin | CVE-2024-12087İstismar yok | Rsync: path traversal vulnerability in rsyncsamba · rsync · CWE-22 | Yüksek7,5 | — | %2,3 | 14 Oca 2025 |
31İzleyin | CVE-2019-17365İstismar yok | Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directorienixos · nix · CWE-276 | Yüksek7,8 | — | %0,4 | 9 Eki 2019 |
31İzleyin | CVE-2017-7412İstismar yok | NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain privileges by executing docker commands.nixos · nixos | Yüksek7,8 | — | %0,4 | 3 Nis 2017 |
31İzleyin | CVE-2024-43378İstismar yok | calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systemsnixos · calamares-nixos-extensions · CWE-256 | Yüksek7,8 | — | %0,1 | 15 Ağu 2024 |
30İzleyin | CVE-2024-45049İstismar yok | Nix Hydra Missing authentication when triggering evaluationsnixos · hydra · CWE-306 | Yüksek7,5 | — | %0,6 | 27 Ağu 2024 |
28İzleyin | CVE-2024-12086İstismar yok | Rsync: rsync server leaks arbitrary client filessamba · rsync · CWE-390 | Orta6,8 | — | %1,8 | 14 Oca 2025 |
28İzleyin | CVE-2025-54800İstismar yok | Hydra persistent XSS in build metricsnixos · hydra · CWE-79 | Yüksek7,1 | — | %0,2 | 12 Ağu 2025 |
27İzleyin | CVE-2025-54864İstismar yok | Hydra missing authentication when triggering evaluations through GitHub and Gitea pluginsnixos · hydra · CWE-306 | Orta6,9 | — | %0,4 | 12 Ağu 2025 |
23İzleyin | CVE-2024-27297İstismar yok | Nix Corruption of fixed-output derivationsnixos · nix · CWE-367 | Orta5,9 | — | %0,6 | 11 Mar 2024 |
22İzleyin | CVE-2023-36476İstismar yok | `calamares-nixos-extensions` LUKS keyfile exposurenixos · calamares-nixos-extensions · CWE-200 | Orta5,5 | — | %0,3 | 28 Haz 2023 |
21İzleyin | CVE-2024-32657İstismar yok | Hydra has persistent XSS vulnerability serving HTML build outputsnixos · hydra · CWE-79 | Orta5,4 | — | %0,5 | 22 Nis 2024 |
10İzleyin | CVE-2025-32435İstismar yok | Hydra no restricted eval after nix-eval-jobs migrationnixos · hydra · CWE-95 | Düşük2,6 | — | %0,3 | 15 Nis 2025 |
- CVE-2026-3143162Bu hafta
crypto: algif_aead - Revert to operating out-of-place
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3linux · linux kernel22 Nis 2026
- CVE-2024-1208461Bu hafta
Rsync: heap buffer overflow in rsync due to improper checksum length handling
KritikCVSS 9,8Kavram kanıtıEPSS %72samba · rsync15 Oca 2025
- CVE-2024-4559335İzleyin
Nix affected by unsafe NAR unpacking
YüksekCVSS 8,8İstismar yokEPSS %1nixos · nix10 Eyl 2024
- CVE-2024-1208533İzleyin
Rsync: info leak via uninitialized stack contents
YüksekCVSS 7,5Kavram kanıtıEPSS %9samba · rsync14 Oca 2025
- CVE-2026-3986033İzleyin
Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination
YüksekCVSS 8,4İstismar yokEPSS %0linux · linux kernel8 Nis 2026
- CVE-2024-1208831İzleyin
Rsync: --safe-links option bypass leads to path traversal
YüksekCVSS 7,5İstismar yokEPSS %5samba · rsync14 Oca 2025
- CVE-2024-1208731İzleyin
Rsync: path traversal vulnerability in rsync
YüksekCVSS 7,5İstismar yokEPSS %2samba · rsync14 Oca 2025
- CVE-2019-1736531İzleyin
Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directorie
YüksekCVSS 7,8İstismar yokEPSS %0nixos · nix9 Eki 2019
- CVE-2017-741231İzleyin
NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain privileges by executing docker commands.
YüksekCVSS 7,8İstismar yokEPSS %0nixos · nixos3 Nis 2017
- CVE-2024-4337831İzleyin
calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems
YüksekCVSS 7,8İstismar yokEPSS %0nixos · calamares-nixos-extensions15 Ağu 2024
- CVE-2024-4504930İzleyin
Nix Hydra Missing authentication when triggering evaluations
YüksekCVSS 7,5İstismar yokEPSS %1nixos · hydra27 Ağu 2024
- CVE-2024-1208628İzleyin
Rsync: rsync server leaks arbitrary client files
OrtaCVSS 6,8İstismar yokEPSS %2samba · rsync14 Oca 2025
- CVE-2025-5480028İzleyin
Hydra persistent XSS in build metrics
YüksekCVSS 7,1İstismar yokEPSS %0nixos · hydra12 Ağu 2025
- CVE-2025-5486427İzleyin
Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins
OrtaCVSS 6,9İstismar yokEPSS %0nixos · hydra12 Ağu 2025
- CVE-2024-2729723İzleyin
Nix Corruption of fixed-output derivations
OrtaCVSS 5,9İstismar yokEPSS %1nixos · nix11 Mar 2024
- CVE-2023-3647622İzleyin
`calamares-nixos-extensions` LUKS keyfile exposure
OrtaCVSS 5,5İstismar yokEPSS %0nixos · calamares-nixos-extensions28 Haz 2023
- CVE-2024-3265721İzleyin
Hydra has persistent XSS vulnerability serving HTML build outputs
OrtaCVSS 5,4İstismar yokEPSS %0nixos · hydra22 Nis 2024
- CVE-2025-3243510İzleyin
Hydra no restricted eval after nix-eval-jobs migration
DüşükCVSS 2,6İstismar yokEPSS %0nixos · hydra15 Nis 2025