CVE-2021-44481

2022-04-1518:15:08

Google

osv.dev

yottadb

parameter validation

memcpy

null pointer

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

57.7%

JSON

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in check_and_set_timeout in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer.

References

gitlab.com/YottaDB/DB/YDB/-/issues/828