CVE-2021-44508

CVE-2021-44508 affects FIS GT.M through V7.0-000 (YottaDB code base). The issue is a missing NULL check in calls to ious_open in sr_unix/ious_open.c, which can cause a NULL pointer dereference and crash the application (denial of service). Public references in NVD and OSV describe the same null-d...

CVE-2021-44506

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...

CVE-2021-44506

CVE-2021-44506 affects FIS GT.M through v7.0-000 (YottaDB codebase). The issue is a lack of input validation in sr_unix/do_verify.c (do_verify) that can allow an attacker to corrupt a function pointer and jump to a NULL pointer. Impact described in sources includes potential denial of service via...

CVE-2021-44506

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...

CVE-2021-44505

The CVE-2021-44505 issue affects FIS GT.M through V7.0-000 (tied to the YottaDB codebase) and is caused by a NULL pointer dereference after ZPrint when inputs are crafted. Multiple connected sources confirm the vulnerability and do not provide a published patch/fix detail within the documents; so...

CVE-2021-44505

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint...

CVE-2021-44504

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memc...

CVE-2021-44504

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memc...

CVE-2021-44503

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a call to vaarg on an empty variadic parameter list, most likely causing a memory segmentation fault...

CVE-2021-44503

CVE-2021-44503 affects FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can trigger a call to va_arg on an empty variadic parameter list, most likely causing a memory segmentation fault. The vulnerability is described across multiple sources as a memo...

CVE-2021-44503

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a call to vaarg on an empty variadic parameter list, most likely causing a memory segmentation fault...

CVE-2021-44502

CVE-2021-44502 affects FIS GT.M (via the YottaDB code base) in versions up to V7.0-000. The issue arises when using crafted input that lets an attacker control the size of a memset in sr_unix/util_output.c during util_format. This could lead to memory-related issues and a denial of service (per t...

CVE-2021-44502

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can control the size of a memset that occurs in calls to utilformat in srunix/utiloutput.c...

CVE-2021-44502

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can control the size of a memset that occurs in calls to utilformat in srunix/utiloutput.c...

CVE-2021-44501

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference...

CVE-2021-44501

CVE-2021-44501 affects FIS GT.M through V7.0-000 (YottaDB code base) where crafted input can make ZRead crash due to a NULL pointer dereference. Documented impact is crash; no explicit exploit details or patch/remediation are provided in the connected sources. Monitor for updates from GT.M/YottaD...

CVE-2021-44501

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference...

CVE-2021-44500

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of input validation in calls to ebdiv in srport/ebmuldiv.c allows attackers to crash the application by performing a divide by zero...

CVE-2021-44500

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of input validation in calls to ebdiv in srport/ebmuldiv.c allows attackers to crash the application by performing a divide by zero...

CVE-2021-44499

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that...