CVE-2021-44498

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

DEBIAN-CVE-2021-44498

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

CVE-2021-44488

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in opfnfnumber in srport/opfnfnumber.c in order to corrupt memory or crash the application...

CVE-2021-44483

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to ebdiv in srport/ebmuldiv.c allows attackers to crash the application by performing a divide by zero...

CVE-2021-44485

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in tripgen in srport/emitcode.c allows attackers to crash the application by dereferencing a NULL pointer...

PT-2022-12135 · Yottadb · Yottadb

Name of the Vulnerable Software and Affected Versions: YottaDB versions prior to r1.32 and V7.0-000 Description: An issue was discovered that allows attackers to control the size and input to calls to memcpy in op fnfnumber in sr port/op fnfnumber.c using crafted input. This can lead to memory...

PT-2022-12132

Name of the Vulnerable Software and Affected Versions YottaDB versions prior to r1.33 and V7.0-001 Description An issue was discovered that allows attackers to crash the application by dereferencing a NULL pointer due to a lack of NULL checks in the trip gen function in sr port/emit code.c...

PT-2022-12131

Name of the Vulnerable Software and Affected Versions YottaDB versions prior to r1.33 and V7.0-001 Description The issue is related to a lack of NULL checks in calls to emit trip in sr port/emit code.c, which allows attackers to crash the application by dereferencing a NULL pointer. Recommendatio...

PT-2022-12145 · Yottadb +4 · Yottadb +4

Name of the Vulnerable Software and Affected Versions: FIS GT.M versions through V7.0-000 Description: An issue was discovered related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f incr in sr port/f incr.c and cause a cra...

PT-2022-12138

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 Description An issue was discovered where attackers can cause a calculation of the size of calls to memset in op fnj3 in sr port/op fnj3.c to result in an extremely large value, leading to a...

PT-2022-12133

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 Description An issue was discovered that allows attackers to manipulate the value of a function pointer used in op write in sr port/op write.c using crafted input, which can lead to control of the fl...