Vulnerabilities > CVE-2021-44494 - NULL Pointer Dereference vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

yottadb

fisglobal

CWE-476

NVD

Published: 2022-04-15

Updated: 2024-11-21

Summary

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.

Vulnerable Configurations

Part	Description	Count
Application	Yottadb Yottadb Yottadb 0.2.0 Yottadb Yottadb 0.3.0 Yottadb Yottadb 1.00 Yottadb Yottadb 1.0.0 Yottadb Yottadb 1.1.0 Yottadb Yottadb 1.2.0 Yottadb Yottadb 1.10 Yottadb Yottadb 1.20 Yottadb Yottadb 1.22 Yottadb Yottadb 1.24 Yottadb Yottadb 1.26 Yottadb Yottadb 1.28 Yottadb Yottadb 1.30 Yottadb Yottadb 1.32	14
Application	Fisglobal Fisglobal Gt.M *	1

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References