VDB
GHSA-wgrg-5h56-jg27
GHSA-wgrg-5h56-jg27
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Out-of-bounds write in nix::unistd::getgrouplist
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| crates.io | nix | 0.22.0, 0.22.0, 0.16.0 |
| chainguard | nsexec | 0, 0, 0 |
Timeline
- Jun 17, 2022 CVE Published
- Mar 2, 2026 Security Advisory
References
- https://github.com/nix-rust/nix product
- https://rustsec.org/advisories/RUSTSEC-2021-0119.html url
- GitHub Advisory GHSA-wgrg-5h56-jg27 vendor-advisory
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nix/RUSTSEC-2021-0119.md url
- https://nvd.nist.gov/vuln/detail/CVE-2021-45707 vendor-advisory
- GitHub Advisory GHSA-76w9-p8mg-j927 vendor-advisory
- https://github.com/nix-rust/nix/issues/1541 discussion