add cpe config for nixos package manager cve

Signed-off-by: Weston Steimel <[email protected]>

.snapshot/2024/CVE-2024-27297.json

@@ -0,0 +1,3 @@
+{
+  "cve": {}
+}

data/2024/CVE-2024-27297.json

@@ -0,0 +1,56 @@
+{
+  "_annotation": {
+    "cve_id": "CVE-2024-27297",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "snapshot": "https://raw.githubusercontent.com/anchore/nvd-data-overrides/main/.snapshot/2024/CVE-2024-27297.json",
+    "triage_notes": {
+      "references": [
+        "https://github.com/NixOS/nix/security/advisories/GHSA-2ffj-w4mj-pg37",
+        "https://hackmd.io/03UGerewRcy3db44JQoWvw",
+        "https://github.com/NixOS/nix/commit/f8170ce9f119e5e6724eb81ff1b5a2d4c0024000"
+      ]
+    }
+  },
+  "cve": {
+    "configurations": [
+      {
+        "nodes": [
+          {
+            "cpeMatch": [
+              {
+                "criteria": "cpe:2.3:a:nixos:nix:*:*:*:*:*:*:*:*",
+                "matchCriteriaId": "1A4EDC94-F37D-446D-BBA5-46C3734B69ED",
+                "versionEndExcluding": "2.3.18",
+                "versionStartIncluding": "2.3.0",
+                "vulnerable": true
+              },
+              {
+                "criteria": "cpe:2.3:a:nixos:nix:*:*:*:*:*:*:*:*",
+                "matchCriteriaId": "637283C9-9E3C-4783-BA1C-CDF811AD92C5",
+                "versionEndExcluding": "2.18.2",
+                "versionStartIncluding": "2.4.0",
+                "vulnerable": true
+              },
+              {
+                "criteria": "cpe:2.3:a:nixos:nix:*:*:*:*:*:*:*:*",
+                "matchCriteriaId": "40840A71-C348-4AF3-843F-983B01840B51",
+                "versionEndExcluding": "2.19.4",
+                "versionStartIncluding": "2.19.0",
+                "vulnerable": true
+              },
+              {
+                "criteria": "cpe:2.3:a:nixos:nix:*:*:*:*:*:*:*:*",
+                "matchCriteriaId": "114E4C4B-5B94-475A-9203-FE8F2FC3F88A",
+                "versionEndExcluding": "2.20.5",
+                "versionStartIncluding": "2.20.0",
+                "vulnerable": true
+              }
+            ],
+            "negate": false,
+            "operator": "OR"
+          }
+        ]
+      }
+    ]
+  }
+}