Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service DoS attacks. An attacker is able to cause a type to be incorrectly initialized in the function fincr of srport/fincr.c and cause a NULL pointer dereference via a crafted input resulting in an application crash...

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to the use after free condition in a pointer which pushed into previously free memory by the loop, allowing an attacker to cause an application crash by providing a malicious input...

MAL-2022-3493 Malicious code in gtm-tracking-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e849bf91f82dbd6013c54266e0b8ab5b8107604190298ca59817cdf94fe2aba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-438 Malicious code in @msmg/gtm-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5755beca6bf1d5544c49f75ca17d6094c45ade4dc924cd8fb8adddeef176f4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @frontend-metrics/gtm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5743ebe739a7fe8bb76a512075ce5fc3e9b4936813b47d6d8e83cce538db40be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-279 Malicious code in @frontend-metrics/gtm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5743ebe739a7fe8bb76a512075ce5fc3e9b4936813b47d6d8e83cce538db40be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2021-44498

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

DEBIAN-CVE-2021-44507

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

CVE-2021-44508

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of NULL checks in calls to iousopen in srunix/iousopen.c allows attackers to crash the application by dereferencing a NULL pointer...

DEBIAN-CVE-2021-44508

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of NULL checks in calls to iousopen in srunix/iousopen.c allows attackers to crash the application by dereferencing a NULL pointer...

DEBIAN-CVE-2021-44510

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the...

CVE-2021-44498

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

CVE-2021-44507

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

DEBIAN-CVE-2021-44503

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a call to vaarg on an empty variadic parameter list, most likely causing a memory segmentation fault...

DEBIAN-CVE-2021-44496

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data structures and gain control of the flow of execution...

UBUNTU-CVE-2021-44498

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

UBUNTU-CVE-2021-44496

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data structures and gain control of the flow of execution...

UBUNTU-CVE-2021-44499

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that...

UBUNTU-CVE-2021-44509

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application...

FIS GT.M 安全漏洞

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which can be exploited by an attacker to calculate the size of a call to memset in opfnj3 in srport/opfnj3.c, resulting in a very large value that can cause a segmentation error and crash the...