NixOS nix up to 2.24.9 protection mechanism

Summaryinfo

A vulnerability has been found in NixOS nix up to 2.24.9 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to protection mechanism. This vulnerability is referenced as CVE-2024-51481. The attack can only be performed from a local environment. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in NixOS nix up to 2.24.9. It has been rated as problematic. This issue affects an unknown part. The manipulation with an unknown input leads to a protection mechanism vulnerability. Using CWE to declare the problem leads to CWE-693. The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Nix is a package manager for Linux and other Unix systems. On macOS, built-in builders (such as `builtin:fetchurl`, exposed to users with `import `) were not executed in the macOS sandbox. Thus, these builders (which are running under the `nixbld*` users) had read access to world-readable paths and write access to world-writable paths outside of the sandbox. This issue is fixed in 2.18.9, 2.19.7, 2.20.9, 2.21.5, 2.22.4, 2.23.4, and 2.24.10. Note that sandboxing is not enabled by default on macOS. The Nix sandbox is not primarily intended as a security mechanism, but as an aid to improve reproducibility and purity of Nix builds. However, sandboxing *can* mitigate the impact of other security issues by limiting what parts of the host system a build has access to.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2024-51481 since 10/28/2024. The exploitation is known to be difficult. Attacking locally is a requirement. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 2.18.9, 2.19.7, 2.20.9, 2.21.5, 2.22.4, 2.23.4, 2.24.10, 2.20.9, 2.21.5, 2.22.4, 2.23.4 or 2.24.10 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• NixOS

Name

• nix

Version

• 2.18.0
• 2.18.1
• 2.18.2
• 2.18.3
• 2.18.4
• 2.18.5
• 2.18.6
• 2.18.7
• 2.18.8
• 2.19.0
• 2.19.1
• 2.19.2
• 2.19.3
• 2.19.4
• 2.19.5
• 2.19.6
• 2.19.7
• 2.20.0
• 2.20.1
• 2.20.2
• 2.20.3
• 2.20.4
• 2.20.5
• 2.20.6
• 2.20.7
• 2.20.8
• 2.20.9
• 2.21.0
• 2.21.1
• 2.21.2
• 2.21.3
• 2.21.4
• 2.21.5
• 2.22.0
• 2.22.1
• 2.22.2
• 2.22.3
• 2.22.4
• 2.23.0
• 2.23.1
• 2.23.2
• 2.23.3
• 2.23.4
• 2.24.0
• 2.24.1
• 2.24.2
• 2.24.3
• 2.24.4
• 2.24.5
• 2.24.6
• 2.24.7
• 2.24.8
• 2.24.9

Website

• Product: https://github.com/NixOS/nix/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion