CVE-2021-44482

CVE-2021-44482 affects YottaDB up to r1.32 and V7.0-000. The issue is a lack of input validation in calls to do_verify in sr_unix/do_verify.c, which can allow an attacker to jump to a NULL pointer by corrupting a function pointer. Documented impact includes potential high availability concerns du...

CVE-2021-44481

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

CVE-2021-44481

CVE-2021-44481 affects YottaDB (r1.32 and V7.0-000) and is caused by missing parameter validation in memcpy in sr_unix/ztimeoutroutines.c (function check_and_set_timeout), enabling an attempt to read from a NULL pointer. The available connected documents specify the vulnerable component and root ...

YottaDB 输入验证错误漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB due to a lack of input validation when calling ebdiv in srport/ebmuldiv.c. An attacker could exploit this vulnerability to crash the application by performing a division by zero...

YottaDB 安全漏洞

YottaDB is a real-time database from the American company YottaDB. A security vulnerability in YottaDB r1.32 and versions prior to V7.0-000 allows an attacker to calculate the size of a call to memset in opfnj3 in srport/opfnj3.c to produce a very large value, which could cause a segmentation err...

PT-2022-12149 · Fis +3 · Fis Gt.M +3

Name of the Vulnerable Software and Affected Versions: FIS GT.M versions prior to V7.0-000 Description: An issue was discovered related to the YottaDB code base. Using crafted input, an attacker can control the size of a memset that occurs in calls to util format in sr unix/util output.c...

PT-2022-12139 · Yottadb +4 · Yottadb +4

Name of the Vulnerable Software and Affected Versions: YottaDB versions through r1.32 and V7.0-000 FIS GT.M versions through V7.0-000 Description: An issue allows attackers to cause a type to be incorrectly initialized in the function f incr in sr port/f incr.c using crafted input, leading to a...

YottaDB 代码问题漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier, which stems from a missing NULL check in the call to iousopen in srunix/iousopen.c. An attacker could crash the application by dereferencing the NULL pointer. An attacker could exploit...

YottaDB 代码问题漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier, which stems from a missing NULL check in tripgen in srport/emitcode.c. An attacker could use this vulnerability to crash the application by dereferencing the NULL pointer. An attacker...

YottaDB 安全漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB versions prior to r1.32 and V7.0-000, which could be exploited by an attacker to calculate the size of a call to memset in opfnj3 in srport/opfnj3.c, resulting in a very large value that could cause a...

PT-2022-12135 · Yottadb · Yottadb

Name of the Vulnerable Software and Affected Versions: YottaDB versions prior to r1.32 and V7.0-000 Description: An issue was discovered that allows attackers to control the size and input to calls to memcpy in op fnfnumber in sr port/op fnfnumber.c using crafted input. This can lead to memory...

YottaDB 代码问题漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier, which stems from a missing NULL check in the call to emittrip in srport/emitcode.c. An attacker could crash the application by dereferencing the NULL pointer. An attacker could crash t...

YottaDB 输入验证错误漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier, which stems from missing input validation in the call to doverify in srunix/doverify.c. An attacker could use this vulnerability to attempt to jump to a NULL pointer by corrupting the...

YottaDB 代码问题漏洞

YottaDB is a real-time database from the American company YottaDB. A security vulnerability exists in YottaDB r1.32 and versions prior to V7.0-000, which allows an attacker to cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to NULL pointer...

YottaDB缓冲区错误漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in versions of YottaDB prior to r1.32, which could be exploited by attackers to control the size variables and buffers passed to memcpy calls to overwrite critical data structures and control the execution flow...

YottaDB 代码问题漏洞

YottaDB is a real-time database from YottaDB, Inc. YottaDB r1.32 and earlier versions have a security vulnerability that can be exploited to cause a NULL pointer dereference after a call to ZPrint...

YottaDB 代码问题漏洞

YottaDB is a real-time database from YottaDB, Inc. YottaDB version r1.32 has a security vulnerability that allows an attacker to crash by causing a NULL pointer dereference with a call to ZRead...

PT-2022-12145 · Yottadb +4 · Yottadb +4

Name of the Vulnerable Software and Affected Versions: FIS GT.M versions through V7.0-000 Description: An issue was discovered related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f incr in sr port/f incr.c and cause a cra...

YottaDB 安全漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier versions, which can be exploited to gain control of the execution process by manipulating the value of the function pointer used by opwrite in srport/opwrite.c using carefully crafted...

YottaDB 输入验证错误漏洞

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB, which stems from a missing parameter validation in the call to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allowing an attacker to attempt to read from a NULL pointer. No detailed...