Latest CVE Feed
-
7.5
HIGHCVE-2021-44507
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of parameter validation in calls to memcpy in str_tok in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer.... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44506
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer.... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44505
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44504
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value durin... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44503
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to va_arg on an empty variadic parameter list, most likely causing a memory segmentation fault.... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44502
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size of a memset that occurs in calls to util_format in sr_unix/util_output.c.... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44501
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44500
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero.... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44499
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is the... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44498
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer deref... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44497
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-44496
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data structure... Read more
Affected Products : gt.m- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44495
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.... Read more
- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44494
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.... Read more
- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44493
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is... Read more
- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44492
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer d... Read more
- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44491
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fau... Read more
- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44490
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fau... Read more
- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-44489
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a segmentation fault and crash the application. T... Read more
- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024
-
9.1
CRITICALCVE-2021-44488
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op_fnfnumber in sr_port/op_fnfnumber.c in order to corrupt memory or crash the application.... Read more
- Published: Apr. 15, 2022
- Modified: Nov. 21, 2024