CVE-2021-44501

Опубликовано: 15 апр. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.

Ссылки

http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
Release Notes
Third Party Advisory
https://gitlab.com/YottaDB/DB/YDB/-/issues/828
Issue Tracking
Patch
Third Party Advisory
https://sourceforge.net/projects/fis-gtm/files/
Product
Third Party Advisory
http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
Release Notes
Third Party Advisory
https://gitlab.com/YottaDB/DB/YDB/-/issues/828
Issue Tracking
Patch
Third Party Advisory
https://sourceforge.net/projects/fis-gtm/files/
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fisglobal:gt.m:*:*:*:*:*:*:*:*

Версия до 7.0-000 (включая)

EPSS

Процентиль: 58%

0.00368

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2021-44501

CVSS3: 7.5

ubuntu

почти 4 года назад

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.

CVE-2021-44501

CVSS3: 7.5

debian

почти 4 года назад

An issue was discovered in FIS GT.M through V7.0-000 (related to the Y ...

GHSA-wpg9-q9rc-8cx9

CVSS3: 7.5

github

почти 4 года назад

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.

EPSS

Процентиль: 58%

0.00368

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476