CVE-2022-29486: 
NixOS vulnerability analysis and mitigation

CVE-2022-29486 is a security vulnerability discovered in Intel's Hyperscan library affecting all versions downloaded before April 29, 2022. The vulnerability stems from improper buffer restrictions in the library's implementation (NVD, Intel Advisory).

The vulnerability is classified as an Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119). According to the National Vulnerability Database, it received a CVSS v3.1 base score of 9.8 (CRITICAL) from NIST with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, while Intel Corporation assessed it with a CVSS score of 4.3 (MEDIUM) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N (NVD).

The vulnerability could potentially enable escalation of privilege via network access if successfully exploited. The critical CVSS score indicates potential for complete compromise of system confidentiality, integrity, and availability (NVD).

Intel has released version 5.4.0 of the Hyperscan library to address this vulnerability. Users are advised to update to this version or later to mitigate the security risk (NVD).