CVE-2021-44500: Input Validation
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to ebdiv in srport/ebmuldiv.c allows attackers to crash the application by performing a divide by zero.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/fis-gtmto a version that resolves this vulnerability.Fixed in 7.0-005-1Fixed in 7.1-006-1
Event History
Frequently Asked Questions
What is the vulnerability identifier for this issue?
The vulnerability identifier for this issue is CVE-2021-44500.
What is the severity of CVE-2021-44500?
The severity of CVE-2021-44500 is high with a CVSS score of 7.5.
Which software is affected by CVE-2021-44500?
FIS GT.M through V7.0-000 (related to the YottaDB code base) is affected by CVE-2021-44500.
How can an attacker exploit CVE-2021-44500?
An attacker can exploit CVE-2021-44500 by performing a divide by zero, causing the application to crash.
Is there a fix available for CVE-2021-44500?
Yes, there is a fix available for CVE-2021-44500. It is recommended to update to a version of FIS GT.M that addresses the issue.