Nixpkgs security tracker

Permalink CVE-2023-20587

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

created 11 months, 1 week ago

Improper Access Control in System Management Mode (SMM) may allow …

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisoryx_transferred

Affected products

PI

==various
==various

AMD EPYC(TM) Embedded 7003

==various

AMD EPYC(TM) Embedded 9003

==various

AMD EPYC(TM) Embedded 3000

==various

AMD EPYC(TM) Embedded 7002

==various

Matching in nixpkgs

pkgs.spoofdpi

Simple and fast anti-censorship tool written in Go

nixos-unstable 0.12.0
- nixpkgs-unstable 0.12.0
- nixos-unstable-small 0.12.0

pkgs.perl538Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.perl540Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.haskellPackages.hsPID

PID control loop

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2

pkgs.spirv-llvm-translator

Tool and a library for bi-directional translation between SPIR-V and LLVM IR

nixos-unstable 18.1.0
- nixpkgs-unstable 18.1.0
- nixos-unstable-small 18.1.0

pkgs.perl538Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl540Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl538Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.perl540Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.haskellPackages.EdisonAPI

A library of efficient, purely-functional data structures (API)

nixos-unstable 1.3.3.1
- nixpkgs-unstable 1.3.3.1
- nixos-unstable-small 1.3.3.1

pkgs.perl538Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl540Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl538Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl540Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl538Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl540Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl538Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl540Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl538Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl538Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl538Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl540Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl540Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl540Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl538Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

pkgs.perl540Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

Package maintainers

@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
@invokes-su Souvik Sen <nixpkgs-commits@deshaw.com>
@stigtsp Stig Palmquist <stig@stig.io>
@gloaming Craig Hall <ch9871@gmail.com>
@s0me1newithhand7s hand7s <s0me1newithhand7s@gmail.com>

Permalink CVE-2023-31346

6.0 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): NONE
Scope (S): CHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): NONE
Availability impact (A): NONE

created 1 year ago

Failure to initialize memory in SEV Firmware may allow a …

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisoryx_transferred

Affected products

PI

==various

Matching in nixpkgs

pkgs.spoofdpi

Simple and fast anti-censorship tool written in Go

nixos-unstable 0.12.0
- nixpkgs-unstable 0.12.0
- nixos-unstable-small 0.12.0

pkgs.perl538Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.perl540Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.haskellPackages.hsPID

PID control loop

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2

pkgs.spirv-llvm-translator

Tool and a library for bi-directional translation between SPIR-V and LLVM IR

nixos-unstable 18.1.0
- nixpkgs-unstable 18.1.0
- nixos-unstable-small 18.1.0

pkgs.perl538Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl540Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl538Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.perl540Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.haskellPackages.EdisonAPI

A library of efficient, purely-functional data structures (API)

nixos-unstable 1.3.3.1
- nixpkgs-unstable 1.3.3.1
- nixos-unstable-small 1.3.3.1

pkgs.perl538Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl540Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl538Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl540Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl538Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl540Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl538Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl540Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl538Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl538Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl538Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl540Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl540Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl540Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl538Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

pkgs.perl540Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

Package maintainers

@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
@invokes-su Souvik Sen <nixpkgs-commits@deshaw.com>
@stigtsp Stig Palmquist <stig@stig.io>
@gloaming Craig Hall <ch9871@gmail.com>
@s0me1newithhand7s hand7s <s0me1newithhand7s@gmail.com>

Permalink CVE-2023-31347

4.9 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): HIGH
Availability impact (A): NONE

created 1 year ago

Due to a code bug in Secure_TSC, SEV firmware may …

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 vendor-advisoryx_transferred

Affected products

PI

==various

Matching in nixpkgs

pkgs.spoofdpi

Simple and fast anti-censorship tool written in Go

nixos-unstable 0.12.0
- nixpkgs-unstable 0.12.0
- nixos-unstable-small 0.12.0

pkgs.perl538Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.perl540Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.haskellPackages.hsPID

PID control loop

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2

pkgs.spirv-llvm-translator

Tool and a library for bi-directional translation between SPIR-V and LLVM IR

nixos-unstable 18.1.0
- nixpkgs-unstable 18.1.0
- nixos-unstable-small 18.1.0

pkgs.perl538Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl540Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl538Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.perl540Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.haskellPackages.EdisonAPI

A library of efficient, purely-functional data structures (API)

nixos-unstable 1.3.3.1
- nixpkgs-unstable 1.3.3.1
- nixos-unstable-small 1.3.3.1

pkgs.perl538Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl540Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl538Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl540Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl538Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl540Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl538Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl540Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl538Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl538Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl538Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl540Packages.OpenAPIClient

Client for talking to an Open API powered server

nixos-unstable 1.07
- nixpkgs-unstable 1.07
- nixos-unstable-small 1.07

pkgs.perl540Packages.PPIxQuoteLike

Parse Perl string literals and string-literal-like things

nixos-unstable 0.023
- nixpkgs-unstable 0.023
- nixos-unstable-small 0.023

pkgs.perl540Packages.PPIxUtilities

Extensions to PPI|PPI

nixos-unstable 1.001000
- nixpkgs-unstable 1.001000
- nixos-unstable-small 1.001000

pkgs.perl538Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

pkgs.perl540Packages.MojoliciousPluginOpenAPI

OpenAPI / Swagger plugin for Mojolicious

nixos-unstable 5.09
- nixpkgs-unstable 5.09
- nixos-unstable-small 5.09

Package maintainers

@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
@invokes-su Souvik Sen <nixpkgs-commits@deshaw.com>
@stigtsp Stig Palmquist <stig@stig.io>
@gloaming Craig Hall <ch9871@gmail.com>
@s0me1newithhand7s hand7s <s0me1newithhand7s@gmail.com>

Permalink CVE-2023-20579

4.4 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year, 1 month ago

Improper Access Control in the AMD SPI protection feature may …

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.