CVE catalog

CVE-2024-27297

Nix vulnerabilities

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.59% · Oct 27, 2026

Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host (or another fixed-output derivation) via Unix domain sockets in the abstract namespace. This allows to modify the output of the derivation, after Nix has registered the path as "valid" and immutable in the Nix database. In particular, this allows the output of fixed-output derivations to be modified from their expected content. This issue has been addressed in versions 2.3.18 2.18.2 2.19.4 and 2.20.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannixsid2.34.8+dfsg-1fixed
Debiannixforky2.34.8+dfsg-1fixed
Debiannixtrixie2.26.3+dfsg-1fixed
Debiannixbookworm2.8.0-1.1vulnerable
UbuntunixnobleNot reportedvulnerable
Ubuntunixnoble2.18.1+dfsg-1ubuntu5+esm2fixed
Ubuntunix-binnoble2.18.1+dfsg-1ubuntu5+esm2fixed
Ubuntunix-setup-systemdnoble2.18.1+dfsg-1ubuntu5+esm2fixed
Ubuntuguixnoble1.4.0-6ubuntu0.1~esm1fixed
Ubuntuguixpro1.4.0-5vulnerable
Ubuntuguixpro1.4.0-6vulnerable
Ubuntuguixpro1.4.0-6build1vulnerable
Ubuntuguixpro1.4.0-6ubuntu0.1~esm1fixed
Ubuntuguixpro1.2.0-4vulnerable
Ubuntuguixpro1.3.0-2vulnerable
Ubuntuguixpro1.3.0-4vulnerable
Ubuntuguixpro1.3.0-4ubuntu0.1~esm1fixed
Ubuntunixpro2.16.1+dfsg-3ubuntu1vulnerable
Ubuntunixpro2.18.1+dfsg-1ubuntu1vulnerable
Ubuntunixpro2.18.1+dfsg-1ubuntu2vulnerable
Ubuntunixpro2.18.1+dfsg-1ubuntu4vulnerable
Ubuntunixpro2.18.1+dfsg-1ubuntu5vulnerable
Ubuntunixpro2.18.1+dfsg-1ubuntu5+esm2fixed
Ubuntunixpro2.16.1+dfsg-3ubuntu1vulnerable
Ubuntunixpro2.18.1+dfsg-1ubuntu1vulnerable
Ubuntunixpro2.18.1+dfsg-1ubuntu2vulnerable
Ubuntunixpro2.18.1+dfsg-1ubuntu4vulnerable
Ubuntunixpro2.18.1+dfsg-1ubuntu5vulnerable
Ubuntunixpro2.18.1+dfsg-1ubuntu5+esm2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannixsourcesid2.22.1+dfsg-1not yet assignedNot reported[1066812]
Debiannixsourceforky2.22.1+dfsg-1not yet assignedNot reported[1066812]
Debiannixsourcetrixie2.22.1+dfsg-1not yet assignedNot reported[1066812]
Debiannixsourcebookworm(unfixed)not yet assignedNot reported[1066812]
Ubuntunixdebnoble2.18.1+dfsg-1ubuntu5+esm2Not reportedNot reportedNot reported
Ubuntunix-bindebnoble2.18.1+dfsg-1ubuntu5+esm2Not reportedNot reportedNot reported
Ubuntunix-setup-systemddebnoble2.18.1+dfsg-1ubuntu5+esm2Not reportedNot reportedNot reported
Ubuntuguixdebnoble1.4.0-6ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntuguixdebpro1.4.0-6ubuntu0.1~esm1Not reportedUSN-8773-1Not reported
Ubuntuguixdebpro1.3.0-4ubuntu0.1~esm1Not reportedUBUNTU-CVE-2024-27297Not reported
Ubuntunixdebpro2.18.1+dfsg-1ubuntu5+esm2Not reportedUBUNTU-CVE-2024-27297Not reported
Ubuntunixdebpro2.18.1+dfsg-1ubuntu5+esm2Not reportedUSN-7633-1Not reported

[Debian bug #1066812]

Notes

[bookworm] nix: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [nix-bin]Affected

    Source package: [nix]

    Details (2)

    • 2.8.0-1.1 · arm64 · bookworm

      Affected

      usn · nix · debian · bookworm; usn · nix · debian · 12

    • 2.8.0-1.1+b1 · amd64 · bookworm

      Affected

      usn · nix · debian · bookworm; usn · nix · debian · 12

  • [nix-setup-systemd]Affected

    Source package: [nix]

    Details (2)

    • 2.8.0-1.1 · all · bookworm

      Affected

      usn · nix · debian · bookworm; usn · nix · debian · 12

    • 2.8.0-1.1 · all · bookworm

      Affected

      usn · nix · debian · bookworm; usn · nix · debian · 12

[Debian 13 (Trixie)]

  • [nix-bin]Fixed

    Source package: [nix]

    Details (2)

    • 2.26.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 2.22.1+dfsg-1

      usn · nix · debian · 13

    • 2.26.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 2.22.1+dfsg-1

      usn · nix · debian · 13

  • [nix-setup-systemd]Fixed

    Source package: [nix]

    Details (2)

    • 2.26.3+dfsg-1 · all · trixie

      Fixed · Fixed: 2.22.1+dfsg-1

      usn · nix · debian · 13

    • 2.26.3+dfsg-1 · all · trixie

      Fixed · Fixed: 2.22.1+dfsg-1

      usn · nix · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]