CVE-2021-44487

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to iousopen in srunix/iousopen.c allows attackers to crash the application by dereferencing a NULL pointer...

UBUNTU-CVE-2021-44502

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can control the size of a memset that occurs in calls to utilformat in srunix/utiloutput.c...

PT-2022-12128

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 Description An issue was discovered in YottaDB, where a lack of parameter validation in calls to memcpy in check and set timeout in sr unix/ztimeoutroutines.c allows attackers to attempt to read from...

PT-2022-12134

Name of the Vulnerable Software and Affected Versions YottaDB versions prior to r1.32 and V7.0-000 Description The issue is related to a lack of NULL checks in calls to the ious open function in the sr unix/ious open.c file, which allows attackers to crash the application by dereferencing a NULL...

FIS GT.M code-related vulnerabilities

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from a lack of parameter validation when calling memcpy in strtok in srunix/ztimeoutroutines.c. The vulnerability can be exploited to attempt to read a null pointer. An attacker ca...

YottaDB has a vulnerability related to input validation.

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier, which stems from missing input validation in the call to doverify in srunix/doverify.c. An attacker could use this vulnerability to attempt to jump to a NULL pointer by corrupting the...

FIS GT.M security vulnerability

FIS GT.M is a database platform. A security vulnerability exists in versions of FIS GT.M prior to V7.0-000, which can be exploited by an attacker to control the size of the memory set that appears when calling utilformat in srunix/utiloutput...

PT-2022-12129

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 Description The issue is related to a lack of input validation in calls to do verify in sr unix/do verify.c, which allows attackers to attempt to jump to a NULL pointer by corrupting a function...