CVE-2021-44492

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

CVE-2021-44491

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a digs-...

CVE-2021-44491

CVE-2021-44491 affects YottaDB through r1.32 and V7.0-000. The vulnerability arises from a calculation of the size of calls to memset in sr_port/op_fnj3.c (function op_fnj3), where crafted input can lead to an extremely large value and trigger a segmentation fault, crashing the application. This ...

CVE-2021-44490

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a "- di...

CVE-2021-44490

The CVE-2021-44490 issue affects YottaDB pre-r1.32 and V7.0-000. Affected code path: memset size calculation in sr_port/op_fnj3.c via the expression - (digs

CVE-2021-44489

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application. This is a "- digs" subtraction...

CVE-2021-44489

CVE-2021-44489 affects YottaDB r1.32 and earlier. The issue is an integer underflow/overflow in the size of memset calls inside sr_port/op_fnj3.c (op_fnj3), caused by crafted input, leading to a segmentation fault and application crash. The available sources describe the root cause (memset size u...

CVE-2021-44488

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in opfnfnumber in srport/opfnfnumber.c in order to corrupt memory or crash the application...

CVE-2021-44488

CVE-2021-44488 affects YottaDB prior to r1.32 and V7.0-000. The root cause is crafted input enabling control over the size and input to memcpy calls in sr_port/op_fnfnumber.c, which can lead to memory corruption or application crashes. Public documents describe the affected component (sr_port/op_...

CVE-2021-44487

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to iousopen in srunix/iousopen.c allows attackers to crash the application by dereferencing a NULL pointer...

CVE-2021-44487

CVE-2021-44487 affects YottaDB through r1.32 and V7.0-000. Root cause: missing NULL checks in ious_open (sr_unix/ious_open.c) can lead to NULL pointer dereference and application crash. Impact described as crash; no exploitation details or patch/remediation provided in the supplied documents.

CVE-2021-44486

The CVE-2021-44486 issue affects YottaDB (through r1.32 and V7.0-000). A crafted input can manipulate the value of a function pointer used in op_write (sr_port/op_write.c), enabling control of the program flow. The connected sources confirm the vulnerable component and the root cause (function po...

CVE-2021-44486

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in opwrite in srport/opwrite.c in order to gain control of the flow of execution...

CVE-2021-44485

CVE-2021-44485 concerns YottaDB (r1.32 and earlier, including V7.0-000) where a missing NULL check in the function at sr_port/emit_code.c (trip_gen) can cause a NULL dereference, leading to application crash. The description explicitly states the vulnerability mechanism and affected component/fil...

CVE-2021-44485

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in tripgen in srport/emitcode.c allows attackers to crash the application by dereferencing a NULL pointer...

CVE-2021-44484

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emittrip in srport/emitcode.c allows attackers to crash the application by dereferencing a NULL pointer...

CVE-2021-44484

Summary: CVE-2021-44484 affects YottaDB releases up to r1.32 and V7.0-000. The root cause is a lack of NULL checks in calls to emit_trip in sr_port/emit_code.c, which allows a NULL pointer dereference that can crash the application. What is affected: YottaDB’s runtime for the referenced releases;...

CVE-2021-44483

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to ebdiv in srport/ebmuldiv.c allows attackers to crash the application by performing a divide by zero...

CVE-2021-44483

CVE-2021-44483 affects YottaDB (through r1.32 and V7.0-000). The issue is a lack of input validation when calling eb_div in sr_port/eb_muldiv.c, which can cause a crash by performing a divide-by-zero. The vulnerability is documented across multiple sources (e.g., NVD/CNVD/OSV) with no public deta...

CVE-2021-44482

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...