6 matches found
CVE-2024-45845
Rejected reason: DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2024-45593. Reason: This record is a reservation duplicate of CVE-2024-45593. Notes: All CVE users should reference CVE-2024-45593 instead of this record. All references and descriptions in this record have been removed to prevent...
PT-2024-31807
Name of the Vulnerable Software and Affected Versions: nix versions 2.24 through 2.24.5 Description: The issue allows directory traversal via a symlink in a nar file due to mishandling of a directory containing a symlink and a directory of the same name. Recommendations: For versions 2.24 through...
CVE-2024-45845
Removed by vendor...
CVE-2024-45845
CVE-2024-45593 relates to the Nix package manager. In affected releases prior to 2.24.6, a bug in Nix 2.24-era code allows a substituter or malicious user to craft a NAR that, when unpacked, can write to arbitrary file-system locations accessible to the Nix process, including with root privileges...