YottaDB 代码问题漏洞

YottaDB is a real-time database from YottaDB, Inc. YottaDB version r1.32 has a security vulnerability that allows an attacker to crash by causing a NULL pointer dereference with a call to ZRead...

PT-2022-12141

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 FIS GT.M version V7.0-000 Description An issue allows an attacker to cause calls to ZRead to crash due to a NULL pointer dereference by using crafted input. Recommendations For YottaDB versions throu...

CVE-2021-44494: NULL Pointer Dereference

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference...

PT-2022-12129

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 Description The issue is related to a lack of input validation in calls to do verify in sr unix/do verify.c, which allows attackers to attempt to jump to a NULL pointer by corrupting a function...

PT-2022-12139 · Yottadb +4 · Yottadb +4

Name of the Vulnerable Software and Affected Versions: YottaDB versions through r1.32 and V7.0-000 FIS GT.M versions through V7.0-000 Description: An issue allows attackers to cause a type to be incorrectly initialized in the function f incr in sr port/f incr.c using crafted input, leading to a...

CVE-2021-44488: Out-of-bounds Write

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in opfnfnumber in srport/opfnfnumber.c in order to corrupt memory or crash the application...

CVE-2021-44486: Undefined Security Weakness

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in opwrite in srport/opwrite.c in order to gain control of the flow of execution...

CVE-2021-44504: Incorrect Calculation

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memc...

CVE-2021-44484: NULL Pointer Dereference

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emittrip in srport/emitcode.c allows attackers to crash the application by dereferencing a NULL pointer...

CVE-2021-44481: Improper Input Validation

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

CVE-2021-44495: NULL Pointer Dereference

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint...

CVE-2021-44505: NULL Pointer Dereference

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint...

YottaDB 代码问题漏洞

YottaDB is a real-time database from YottaDB, Inc. YottaDB r1.32 and earlier versions have a security vulnerability that can be exploited to cause a NULL pointer dereference after a call to ZPrint...

CVE-2021-44487: NULL Pointer Dereference

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to iousopen in srunix/iousopen.c allows attackers to crash the application by dereferencing a NULL pointer...

YottaDB 数字错误漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier, which could be exploited to cause an integer overflow of the size of the memset call in opfnj3 in srport/opfnj3.c, resulting in a segmentation error and crashing the application...

PT-2022-12151

Name of the Vulnerable Software and Affected Versions FIS GT.M versions through V7.0-000 Description An issue was discovered related to the YottaDB code base. Using crafted input, an attacker can cause a size variable, stored as a signed int, to equal an extremely large value, which is interprete...

PT-2022-12149 · Fis +3 · Fis Gt.M +3

Name of the Vulnerable Software and Affected Versions: FIS GT.M versions prior to V7.0-000 Description: An issue was discovered related to the YottaDB code base. Using crafted input, an attacker can control the size of a memset that occurs in calls to util format in sr unix/util output.c...

PT-2022-12144

Name of the Vulnerable Software and Affected Versions FIS GT.M versions through V7.0-000 Description An issue was discovered related to the YottaDB code base. Using crafted input can cause the bounds of a for loop to be miscalculated, leading to a use after free condition where a pointer is pushe...

PT-2022-12145 · Yottadb +4 · Yottadb +4

Name of the Vulnerable Software and Affected Versions: FIS GT.M versions through V7.0-000 Description: An issue was discovered related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f incr in sr port/f incr.c and cause a cra...

YottaDB 安全漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB versions prior to r1.32 and V7.0-000, which could be exploited by an attacker to calculate the size of a call to memset in opfnj3 in srport/opfnj3.c, resulting in a very large value that could cause a...