NI
Product
Nixos
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 1Low 0
Watch
Add Nixos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: before 25.11 |
| CVE-2024-12084 | 9.8 | Jan 15 | Rsync: heap buffer overflow in rsync due to improper checksum length handling Affected: before 24.11; 24.11 |
| CVE-2017-7412 | 7.8 | Apr 4 | NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain privileges by executing docker commands Affected: 17.03 |
| CVE-2024-12087 | 7.5 | Jan 14 | Rsync: path traversal vulnerability in rsync Affected: before 24.11 |
| CVE-2024-12088 | 7.5 | Jan 14 | Rsync: --safe-links option bypass leads to path traversal Affected: before 24.11 |
| CVE-2024-12085 | 7.5 | Jan 14 | Rsync: info leak via uninitialized stack contents Affected: before 24.11 |
| CVE-2024-12086 | 6.8 | Jan 14 | A flaw was found in rsync Affected: before 24.11 |
Showing 7