{"id":"CVE-2021-45707","aliases":["GHSA-76w9-p8mg-j927","GHSA-wgrg-5h56-jg27","RUSTSEC-2021-0119"],"url":"https://o3.security/vulnerability/CVE-2021-45707","summary":"Out-of-bounds Write in nix","details":"An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups.","published":"2021-12-27T00:15:09.940Z","modified":"2026-07-09T11:34:33.689716Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"nix","fixedVersion":"0.20.2"},{"ecosystem":"crates.io","name":"nix","fixedVersion":"0.21.2"},{"ecosystem":"crates.io","name":"nix","fixedVersion":"0.22.2"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-wgrg-5h56-jg27"},{"type":"ADVISORY","url":"https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nix/RUSTSEC-2021-0119.md"},{"type":"REPORT","url":"https://rustsec.org/advisories/RUSTSEC-2021-0119.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T11:34:33.689716Z"}}