Логотип exploitDog
bind:CVE-2021-44493
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-44493

Количество 4

Количество 4

ubuntu логотип

CVE-2021-44493

почти 4 года назад

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-44493

почти 4 года назад

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2021-44493

почти 4 года назад

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-6g32-5m95-62fv

почти 4 года назад

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-44493

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow.

CVSS3: 7.5
0%
Низкий
почти 4 года назад
nvd логотип
CVE-2021-44493

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow.

CVSS3: 7.5
0%
Низкий
почти 4 года назад
debian логотип
CVE-2021-44493

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS ...

CVSS3: 7.5
0%
Низкий
почти 4 года назад
github логотип
GHSA-6g32-5m95-62fv

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow.

CVSS3: 7.5
0%
Низкий
почти 4 года назад

Уязвимостей на страницу