NetSight
IP …
critical9.8

CVE-2021-45707

An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust.

Impact

An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups.

Affected products

VendorProductAffected versions
Nix ProjectNix
from 0.16.0 before 0.20.2
from 0.21.0 before 0.21.2
from 0.22.0 before 0.22.2

Weakness classification

CWE-787

References