A buffer overflow in the daemon may allow a local attacker with access to the daemon interface to achieve arbitrary code execution as the daemon user (root in typical multi-user installations).
| Vendor | Product | Versions |
|---|---|---|
| nix | nix | ≥ 2.24.4, ≥ 2.93.0 |
Updated affected versions, added fixed versions, marked exploit as available and actively exploited, and set severity to HIGH.
Initial creation
