CVE-2021-44495

Опубликовано: 15 апр. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.

Ссылки

http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
Release Notes
Third Party Advisory
https://gitlab.com/YottaDB/DB/YDB/-/issues/828
Issue Tracking
Patch
Third Party Advisory
https://sourceforge.net/projects/fis-gtm/files/
Product
Third Party Advisory
http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
Release Notes
Third Party Advisory
https://gitlab.com/YottaDB/DB/YDB/-/issues/828
Issue Tracking
Patch
Third Party Advisory
https://sourceforge.net/projects/fis-gtm/files/
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fisglobal:gt.m:*:*:*:*:*:*:*:*

Версия до 7.0-000 (включая)

cpe:2.3:a:yottadb:yottadb:*:*:*:*:*:*:*:*

Версия до 1.32 (включая)

EPSS

Процентиль: 58%

0.00368

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2021-44495

CVSS3: 7.5

ubuntu

почти 4 года назад

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.

CVE-2021-44495

CVSS3: 7.5

debian

почти 4 года назад

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS ...

GHSA-c3vq-crh9-3r34

CVSS3: 7.5

github

почти 4 года назад

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.

EPSS

Процентиль: 58%

0.00368

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476