FIS GT.M Denial of Service Vulnerability (CNVD-2022-32794)

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which can be exploited by an attacker to cause a NULL pointer to be dereferenced after a call to ZPrint...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32798)

FIS GT.M is a database platform. A security vulnerability exists in versions of FIS GT.M prior to V7.0-000, which can be exploited by an attacker to cause a size variable stored as a signed integer to equal a very large value, which is interpreted as a negative value during a check. This value is...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32802)

FIS GT.M is a database platform. A security vulnerability exists in versions prior to FIS GT.M V7.0-000, which can be exploited by an attacker to cause an integer underflow to the size of the memset call in opfnj3 in srport/opfnj3.c, resulting in a segmentation error and crashing the application...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32797)

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which can be exploited by an attacker to call vaarg on an empty variable argument list, resulting in a memory segmentation error...

FIS GT.M f_incr Function Denial of Service Vulnerability

FIS GT.M is a database platform. A denial of service vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from the fincr function in srport/fincr.c incorrectly initializing the type and the presence of a NULL pointer dereference, which can be exploited by an attacker to cause ...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32801)

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from a missing NULL check in the call to iousopen in srunix/iousopen.c. The vulnerability can be exploited to crash an application by dereferencing a NULL pointer. An attacker can...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32796)

FIS GT.M is a database platform. A security vulnerability exists in versions of FIS GT.M prior to V7.0-000, which can be exploited by an attacker to control the size of the memory set that appears when calling utilformat in srunix/utiloutput...

FIS GT.M Denial of Service Vulnerability

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which can be exploited by an attacker to calculate the size of a call to memset in opfnj3 in srport/opfnj3.c, resulting in a very large value that can cause a segmentation error and crash the...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32799)

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from the lack of input validation in the call to doverify in srunix/doverify.c. The vulnerability can be exploited to attempt to jump to a NULL pointer by corrupting the function...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32793)

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from a lack of input validation when calling ebdiv in srport/ebmuldiv.c. An attacker can exploit the vulnerability to crash the application by performing a divide by zero...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32800)

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from a lack of parameter validation when calling memcpy in strtok in srunix/ztimeoutroutines.c. The vulnerability can be exploited to attempt to read a null pointer. An attacker ca...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32792)

FIS GT.M is a database platform. A security vulnerability exists in versions prior to FIS GT.M V7.0-000, which can be exploited to cause a buffer overflow by an attacker who calls $Extract to force a signed integer of the size of the save buffer to be a larger negative number, which can then be...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32791)

FIS GT.M is a database platform. A security vulnerability exists in versions prior to FIS GT.M V7.0-000, which can be exploited by an attacker to potentially cause a loop's bounds to be miscalculated through the use of carefully crafted inputs, which could result in the use of a loop to push a...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32795)

FIS GT.M is a database platform. A security vulnerability exists in versions of FIS GT.M prior to V7.0-000, which can be exploited by an attacker to cause a NULL pointer dereference and crash via a call to ZRead...

DEBIAN-CVE-2021-44509

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application...

CVE-2021-44501

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference...

DEBIAN-CVE-2021-44504

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memc...

CVE-2021-44503

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a call to vaarg on an empty variadic parameter list, most likely causing a memory segmentation fault...

CVE-2021-44510

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the...

DEBIAN-CVE-2021-44501

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference...