CVE-2021-44481: Input Validation
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44481?
CVE-2021-44481 has been classified with a moderate severity level due to potential security risks associated with NULL pointer dereference.
How do I fix CVE-2021-44481?
To fix CVE-2021-44481, update YottaDB to version 1.32 or 7.0-001 or later, which includes the necessary patches for parameter validation.
What types of attacks can exploit CVE-2021-44481?
CVE-2021-44481 can be exploited by attackers attempting to read from a NULL pointer, potentially leading to information disclosure or application crashes.
Is my version of YottaDB affected by CVE-2021-44481?
If you are using YottaDB version 1.32 or any version up to and including 7.0-000, your software is affected by CVE-2021-44481.
What component of YottaDB is impacted by CVE-2021-44481?
CVE-2021-44481 specifically impacts the check_and_set_timeout function in the ztimeoutroutines.c file of YottaDB.