CVE-2021-44491
- EPSS 0.27%
- Published 15.04.2022 18:15:08
- Last modified 21.11.2024 06:31:04
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentatio...
CVE-2021-44492
- EPSS 0.25%
- Published 15.04.2022 18:15:08
- Last modified 21.11.2024 06:31:05
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL poin...
CVE-2021-44493
- EPSS 0.4%
- Published 15.04.2022 18:15:08
- Last modified 21.11.2024 06:31:05
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, whi...
CVE-2021-44494
- EPSS 0.35%
- Published 15.04.2022 18:15:08
- Last modified 21.11.2024 06:31:05
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.
CVE-2021-44495
- EPSS 0.35%
- Published 15.04.2022 18:15:08
- Last modified 21.11.2024 06:31:05
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.
CVE-2021-27377
- EPSS 0.51%
- Published 18.02.2021 04:15:11
- Last modified 21.11.2024 05:57:52
An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev_st have a use-after-free.