Lucene search

MitreCVE-2021-44501

HistoryApr 15, 2022 - 6:15 p.m.

CVE-2021-44501

2022-04-1518:15:09

CWE-476

mitre

web.nvd.nist.gov

cve-2021-44501

fis gt.m

yottadb code base

null pointer dereference

nvd

information security

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.6%

JSON

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.

Affected configurations

Nvd

Node

fisglobalgt.mRange≤7.0-000

VendorProductVersionCPE
fisglobalgt.m*cpe:2.3:a:fisglobal:gt.m:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fisglobal	gt.m	*	cpe:2.3:a:fisglobal:gt.m::::::::

References

tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html

gitlab.com/YottaDB/DB/YDB/-/issues/828

sourceforge.net/projects/fis-gtm/files/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.6%

JSON

Related for CVE-2021-44501