CVE-2021-45707

    Dashboard / Vulnerabilities / CVE-2021-45707

    CVE-2021-45707

    Published: 27 Dec 2021Last Modified: 20 Oct 2026

    Summary:

    Details: An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups.

    References: https://github.com/advisories/GHSA-wgrg-5h56-jg27, https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nix/RUSTSEC-2021-0119.md, https://rustsec.org/advisories/RUSTSEC-2021-0119.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- aaa4595b2b71745da8e2e7d2958687fae93fad13
    Fixed -72d805a3eb307dbd4982d35a00c8e971977da25d

    Affected versions

    v0.22.1
    v0.22.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-45707 | CVE-DB