An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups.
References
| Link | Resource |
|---|---|
| https://github.com/advisories/GHSA-wgrg-5h56-jg27 | Third Party Advisory |
| https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nix/RUSTSEC-2021-0119.md | Third Party Advisory |
| https://rustsec.org/advisories/RUSTSEC-2021-0119.html | Issue Tracking Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Oct 2022, 17:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/advisories/GHSA-wgrg-5h56-jg27 - Third Party Advisory |
09 Sep 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary | An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups. |
06 Jan 2022, 19:54
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
| First Time |
Nix Project
Nix Project nix |
|
| References | (MISC) https://rustsec.org/advisories/RUSTSEC-2021-0119.html - Issue Tracking, Third Party Advisory | |
| References | (MISC) https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nix/RUSTSEC-2021-0119.md - Third Party Advisory | |
| CWE | CWE-787 | |
| CPE | cpe:2.3:a:nix_project:nix:*:*:*:*:*:rust:*:* |
27 Dec 2021, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-27 00:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-45707
Mitre link : CVE-2021-45707
CVE.ORG link : CVE-2021-45707
JSON object : View
Products Affected
nix_project
- nix
CWE
CWE-787
Out-of-bounds Write