vulnerability

Ubuntu: USN-7633-1 (CVE-2024-45593): Nix vulnerabilities

Try Surface Command
Back to search
Severity
9
CVSS
(AV:N/AC:M/Au:S/C:C/I:C/A:C)
Published
Sep 10, 2024
Added
Jun 26, 2025
Modified
Aug 18, 2025

Description

Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the Nix process has access. This will be with root permissions when using the Nix daemon. This issue is fixed in Nix 2.24.6.

Solution

ubuntu-pro-upgrade-nix-bin

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today