NixOS is a Linux distribution built on top of the Nix package manager. It is completely declarative, its system configurations are reproducible, makes configuration changes reliable and atomic, and eliminates configuration drift.

NixOS

Homebrew is a free and open-source software package management system that simplifies the installation of software on Apple's macOS operating system and Linux. The name is intended to suggest the idea of building software on the Mac depending on the user's taste. Originally written by Max Howell, the package manager has gained popularity in the Ruby on Rails community and earned praise for its extensibility.

Homebrew

Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protocol dissector, leading to a denial-of-service (DoS) through a reliable process crash when handling truncated XDR-encoded RPC messages.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2025-58946	HIGH	8.2	NixOS	vocal	No	No	Dec 18, 2025
CVE-2025-58949	HIGH	8.1	NixOS	spock	No	No	Dec 18, 2025
CVE-2025-68382	MEDIUM	6.5	NixOS	packetbeat	No	Yes	Dec 18, 2025
CVE-2025-68381	MEDIUM	6.5	NixOS	packetbeat	No	Yes	Dec 18, 2025
CVE-2025-68388	MEDIUM	5.3	NixOS	apm-server-fips-9.2	No	Yes	Dec 18, 2025

CVE-2025-68382:
NixOS vulnerability analysis and mitigation

6.5

Related NixOS vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2025-68382: NixOS vulnerability analysis and mitigation