PT-2022-12150

Name of the Vulnerable Software and Affected Versions FIS GT.M versions through V7.0-000 Description An issue was discovered related to the YottaDB code base. Using crafted input, an attacker can cause a call to va arg on an empty variadic parameter list, most likely causing a memory segmentation...

PT-2022-12151

Name of the Vulnerable Software and Affected Versions FIS GT.M versions through V7.0-000 Description An issue was discovered related to the YottaDB code base. Using crafted input, an attacker can cause a size variable, stored as a signed int, to equal an extremely large value, which is interprete...

PT-2022-12143

Name of the Vulnerable Software and Affected Versions FIS GT.M versions through V7.0-000 Description An issue was discovered related to the YottaDB code base. Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. This allows the attacker to...

CVE-2021-44508: NULL Pointer Dereference

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of NULL checks in calls to iousopen in srunix/iousopen.c allows attackers to crash the application by dereferencing a NULL pointer...

PT-2022-12148

Name of the Vulnerable Software and Affected Versions FIS GT.M versions through V7.0-000 Description An issue was discovered related to the YottaDB code base. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference. Recommendations For FIS GT.M version...

PT-2022-12140

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 YottaDB version V7.0-000 FIS GT.M version V7.0-000 Description An issue allows an attacker to cause a buffer overflow by forcing a signed integer to take on a large negative number, which is then used as the leng...

FIS GT.M 代码问题漏洞

FIS GT.M is a database platform. A security vulnerability exists in versions of FIS GT.M prior to V7.0-000, which can be exploited by an attacker to cause a NULL pointer dereference and crash via a call to ZRead...

PT-2022-12141

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 FIS GT.M version V7.0-000 Description An issue allows an attacker to cause calls to ZRead to crash due to a NULL pointer dereference by using crafted input. Recommendations For YottaDB versions throu...

PT-2022-12154

Name of the Vulnerable Software and Affected Versions FIS GT.M versions prior to V7.0-000 Description The issue is related to a lack of parameter validation in calls to memcpy in the str tok function, located in the sr unix/ztimeoutroutines.c file, which is connected to the YottaDB code base. Thi...

PT-2022-12152

Name of the Vulnerable Software and Affected Versions FIS GT.M versions through V7.0-000 Description An issue was discovered related to the YottaDB code base. Using crafted input, an attacker can cause a NULL pointer dereference after calls to the ZPrint function. Recommendations For FIS GT.M...

CVE-2021-44507: NULL Pointer Dereference

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

CVE-2021-44506: NULL Pointer Dereference

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...

CVE-2021-44509: Integer Underflow (Wrap or Wraparound)

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application...

CVE-2021-44495: NULL Pointer Dereference

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint...

CVE-2021-44493: Buffer Copy without Checking Size of Input

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call...

CVE-2021-44498: NULL Pointer Dereference

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

CVE-2021-44496: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data structures and gain control of the flow of execution...

FIS GT.M 安全漏洞

FIS GT.M is a database platform. A security vulnerability exists in versions of FIS GT.M prior to V7.0-000, which can be exploited by an attacker to cause a size variable stored as a signed integer to equal a very large value, which is interpreted as a negative value during a check. This value is...

CVE-2021-44510: Incorrect Calculation of Buffer Size

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the...

CVE-2021-44497: Use After Free

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop...