YottaDB 缓冲区错误漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in versions of YottaDB prior to r1.32 and V7.0-000, which could be exploited by an attacker to control the size and input of memcpy calls to opfnfnumber in srport/opfnfnumber.c to corrupt memory or crash the...

CVE-2021-44488: Out-of-bounds Write

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in opfnfnumber in srport/opfnfnumber.c in order to corrupt memory or crash the application...