Vulnerabilities > CVE-2021-44492 - NULL Pointer Dereference vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

yottadb

fisglobal

CWE-476

NVD

Published: 2022-04-15

Updated: 2024-11-21

Summary

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer dereference.

Vulnerable Configurations

Part	Description	Count
Application	Yottadb Yottadb Yottadb 0.2.0 Yottadb Yottadb 0.3.0 Yottadb Yottadb 1.00 Yottadb Yottadb 1.0.0 Yottadb Yottadb 1.1.0 Yottadb Yottadb 1.2.0 Yottadb Yottadb 1.10 Yottadb Yottadb 1.20 Yottadb Yottadb 1.22 Yottadb Yottadb 1.24 Yottadb Yottadb 1.26 Yottadb Yottadb 1.28 Yottadb Yottadb 1.30 Yottadb Yottadb 1.32	14
Application	Fisglobal Fisglobal Gt.M *	1

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References