tocsin

CVE-2021-45707

3 advisories.

crates.io/nix CVE-2021-45707: medium 6.7, EPSS 1.69%

Out-of-bounds Write in nix

Action: Upgrade nix to 0.20.2 or later.

cargo update -p nix --precise 0.20.2
cargo update -p nix --precise 0.21.2
cargo update -p nix --precise 0.22.2

Affected

introducedfixedlast affected
0.16.00.20.2-
0.21.00.21.2-
0.22.00.22.2-

Fixed versions

0.20.20.21.20.22.2

Sources

CVE-2021-45707 · published · modified · JSON

crates.io/nix CVE-2021-45707: high, EPSS 1.69%

Out-of-bounds write in nix::unistd::getgrouplist

Action: Upgrade nix to 0.20.2 or later.

cargo update -p nix --precise 0.20.2
cargo update -p nix --precise 0.21.2
cargo update -p nix --precise 0.22.2

Affected

introducedfixedlast affected
0.16.00.20.2-
0.21.00.21.2-
0.22.00.22.2-

Fixed versions

0.20.20.21.20.22.2

Sources

CVE-2021-45707 · published · modified · JSON

crates.io/nix CVE-2021-45707: unknown, EPSS 1.69%

Out-of-bounds write in nix::unistd::getgrouplist

Action: Upgrade nix to 0.20.2 or later.

cargo update -p nix --precise 0.20.2
cargo update -p nix --precise 0.21.2
cargo update -p nix --precise 0.22.2
cargo update -p nix --precise 0.23.0

Affected

introducedfixedlast affected
0.16.00.20.2-
0.21.0-00.21.2-
0.22.0-00.22.2-
0.23.0-00.23.0-

Fixed versions

0.20.20.21.20.22.20.23.0

Sources

CVE-2021-45707 · published · modified · JSON