Vendors / NixOS Records 41 All Threatist records
Exploited (KEV) 1
CVSS critical 4
CVSS high 17
Exploited now NixOS records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.98114 · Published 2026-04-22 · Fixed in 5.10.254, 5.15.204 +6 CWE-669
Priority CRITICAL 87
A heap-based buffer overflow flaw was found in the rsync daemon.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.72514 · Published 2025-01-15 · Fixed in 3.4.1-2.el10 CWE-122
Priority HIGH 72
A flaw was found in rsync which could be triggered when rsync compares file checksums.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.08641 · Published 2025-01-14 · Fixed in 3.4.1-2.el10, 3.0.6-12.el6_10.1 +209 CWE-908
Priority HIGH 66
A flaw was found in rsync.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.04646 · Published 2025-01-14 · Partial fix · 3.4.1-2.el10, 3.1.3-21.el8_10 +2 CWE-22
Priority HIGH 66
A path traversal vulnerability exists in rsync.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02259 · Published 2025-01-14 · Partial fix · 3.4.1-2.el10, 3.0.6-12.el6_10.2 +11 CWE-22
Priority MEDIUM 63
A flaw was found in rsync.
CVSS 3.1 MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.01789 · Published 2025-01-14 · Partial fix · 3.4.1-2.el10, 3.2.5-7.el9_8 +2 CWE-390
Priority LOW 34
NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain privileges by executing docker commands.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00363 · Published 2017-04-04 · No fix listed
Open these records in search → All records by CVSS severity
4 17 12 8 0
