Nixpkgs security tracker

Untriaged

Permalink CVE-2026-18103

4.9 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 1 month, 1 week ago Activity log

Created suggestion 1 month, 1 week ago

Dhcp-server: dhcp-server: persistent denial of service due to buffer overflow via omapi

A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Programming Interface) port, especially if not secured with TSIG (Transaction Signature) key authentication, could send a specially crafted lease creation request. This request, containing an overly long InfiniBand MAC address, triggers a buffer overflow in the `print_hw_addr()` function. Successful exploitation leads to a persistent denial of service (DoS), causing the `dhcpd` service to crash and preventing it from restarting without manual intervention.

References

https://access.redhat.com/security/cve/CVE-2026-18103 x_refsource_REDHATvdb-entry
RHBZ#2508081 x_refsource_REDHATissue-tracking

Affected products

dhcp

Matching in nixpkgs

pkgs.dhcpm

CLI tool for constructing & sending DHCP messages

nixos-unstable 0.2.3
- nixpkgs-unstable 0.2.3
- nixos-unstable-small 0.2.3
nixos-26.05 0.2.3
- nixos-26.05-small 0.2.3
- nixpkgs-26.05-darwin 0.2.3

pkgs.dhcpcd

Client for the Dynamic Host Configuration Protocol (DHCP)

nixos-unstable 10.3.2
- nixpkgs-unstable 10.3.2
- nixos-unstable-small 10.3.2
nixos-26.05 10.3.1
- nixos-26.05-small 10.3.1
- nixpkgs-26.05-darwin 10.3.1

pkgs.dhcpig

Tool to perform advanced DHCP exhaustion attack

nixos-unstable 1.6
- nixpkgs-unstable 1.6
- nixos-unstable-small 1.6
nixos-26.05 1.6
- nixos-26.05-small 1.6
- nixpkgs-26.05-darwin 1.6

pkgs.dhcping

Send DHCP request to find out if a DHCP server is running

nixos-unstable 1.2
- nixpkgs-unstable 1.2
- nixos-unstable-small 1.2
nixos-26.05 1.2
- nixos-26.05-small 1.2
- nixpkgs-26.05-darwin 1.2

pkgs.odhcp6c

Embedded DHCPv6-client for OpenWrt

nixos-unstable 0-unstable-2026-01-25
- nixpkgs-unstable 0-unstable-2026-01-25
- nixos-unstable-small 0-unstable-2026-01-25
nixos-26.05 0-unstable-2026-01-25
- nixos-26.05-small 0-unstable-2026-01-25
- nixpkgs-26.05-darwin 0-unstable-2026-01-25

pkgs.dhcpdump

Tool for visualization of DHCP packets as recorded and output by tcpdump to analyze DHCP server responses

nixos-unstable 1.10
- nixpkgs-unstable 1.10
- nixos-unstable-small 1.10
nixos-26.05 1.10
- nixos-26.05-small 1.10
- nixpkgs-26.05-darwin 1.10

pkgs.python313Packages.aiodhcpwatcher

Watch for DHCP packets with asyncio

nixos-unstable 1.2.7
- nixpkgs-unstable 1.2.7
- nixos-unstable-small 1.2.7
nixos-26.05 1.2.1
- nixos-26.05-small 1.2.1
- nixpkgs-26.05-darwin 1.2.1

pkgs.python314Packages.aiodhcpwatcher

Watch for DHCP packets with asyncio

nixos-unstable 1.2.7
- nixpkgs-unstable 1.2.7
- nixos-unstable-small 1.2.7
nixos-26.05 1.2.1
- nixos-26.05-small 1.2.1
- nixpkgs-26.05-darwin 1.2.1

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>
@Tochiaha Tochukwu Ahanonu <tochiahan@proton.me>
@jmbaur Jared Baur <jaredbaur@fastmail.com>
@felbinger Nico Felbinger <nico@felbinger.eu>
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-15512

2.1 LOW

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): Low (L)
Vulnerable System Impact Integrity (VI): Low (L)
Vulnerable System Impact Availability (VA): Low (L)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Exploit Maturity (E): POC (P)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
Modified Vulnerable System Impact Integrity (MVI): Low (L)
Modified Vulnerable System Impact Availability (MVA): Low (L)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)

updated 2 months ago by @LeSuisse Activity log

Created suggestion 2 months ago
@LeSuisse dismissed (not in Nixpkgs) 2 months ago

pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injection

A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the file \pig-master\pig-visual\pig-codegen\src\main\java\com\pig4cloud\pig\codegen\service\impl\GeneratorServiceImpl.java of the component pig-codegen. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

VDB-377841 | pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injection vdb-entry
VDB-377841 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
CVE-2026-15512 | CVE Analysis and Report third-party-advisory
Submit #847500 | https://github.com/pig-mesh/pig pig v3.9.2 Code Injection third-party-advisory
https://github.com/sombra0316/CVE-2026/blob/main/pig-mesh/SSIT.md exploit

Affected products

Pig

==3.9.2
==3.9.1
==3.9.0

Matching in nixpkgs

pkgs.pig

High-level language for Apache Hadoop

nixos-unstable 0.18.0
- nixpkgs-unstable 0.18.0
- nixos-unstable-small 0.18.0
nixos-26.05 0.17.0
- nixos-26.05-small 0.17.0
- nixpkgs-26.05-darwin 0.17.0

pkgs.pigz

Parallel implementation of gzip for multi-core machines

nixos-unstable 2.8
- nixpkgs-unstable 2.8
- nixos-unstable-small 2.8
nixos-26.05 2.8
- nixos-26.05-small 2.8
- nixpkgs-26.05-darwin 2.8

pkgs.dhcpig

Tool to perform advanced DHCP exhaustion attack

nixos-unstable 1.6
- nixpkgs-unstable 1.6
- nixos-unstable-small 1.6
nixos-26.05 1.6
- nixos-26.05-small 1.6
- nixpkgs-26.05-darwin 1.6

pkgs.pigeon

PEG parser generator for Go

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0
nixos-26.05 1.3.0
- nixos-26.05-small 1.3.0
- nixpkgs-26.05-darwin 1.3.0

pkgs.piglit

OpenGL test suite, and test-suite runner

nixos-unstable 2026-05-04
- nixpkgs-unstable 2026-05-04
- nixos-unstable-small 2026-05-04
nixos-26.05 2026-05-04
- nixos-26.05-small 2026-05-04
- nixpkgs-26.05-darwin 2026-05-04

pkgs.pigpio

C library for the Raspberry which allows control of the General Purpose Input Outputs (GPIO)

nixos-unstable 79
- nixpkgs-unstable 79
- nixos-unstable-small 79
nixos-26.05 79
- nixos-26.05-small 79
- nixpkgs-26.05-darwin 79

pkgs.spigot

Command-line exact real calculator

nixos-unstable 20240909.f158e08
- nixpkgs-unstable 20240909.f158e08
- nixos-unstable-small 20240909.f158e08
nixos-26.05 20240909.f158e08
- nixos-26.05-small 20240909.f158e08
- nixpkgs-26.05-darwin 20240909.f158e08

pkgs.pigment

Extract color palettes from your images

nixos-unstable 0.5.1
- nixpkgs-unstable 0.5.1
- nixos-unstable-small 0.5.1
nixos-26.05 0.5.1
- nixos-26.05-small 0.5.1
- nixpkgs-26.05-darwin 0.5.1

pkgs.dovecot_pigeonhole

Sieve plugin for the Dovecot IMAP server

nixos-unstable 2.4.4
- nixpkgs-unstable 2.4.4
- nixos-unstable-small 2.4.4
nixos-26.05 2.4.4
- nixos-26.05-small 2.4.4
- nixpkgs-26.05-darwin 2.4.4

pkgs.dovecot_pigeonhole_0_5

Sieve plugin for the Dovecot IMAP server

nixos-unstable 0.5.21.1
- nixpkgs-unstable 0.5.21.1
- nixos-unstable-small 0.5.21.1
nixos-26.05 0.5.21.1
- nixos-26.05-small 0.5.21.1
- nixpkgs-26.05-darwin 0.5.21.1