CVE-2021-44502: High severity Fisglobal Gt.m vulnerability
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size of a memset that occurs in calls to utilformat in srunix/utiloutput.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/fis-gtmto a version that resolves this vulnerability.Fixed in 7.0-005-1Fixed in 7.1-006-1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44502?
CVE-2021-44502 has been classified as a vulnerability that could allow an attacker to exploit the affected system.
How do I fix CVE-2021-44502?
To fix CVE-2021-44502, upgrade to FIS GT.M version 7.0-002 or later.
What software is affected by CVE-2021-44502?
CVE-2021-44502 affects FIS GT.M through version 7.0-000.
What type of vulnerability is CVE-2021-44502?
CVE-2021-44502 is a vulnerability that allows an attacker to control memory operations through crafted input.
Can CVE-2021-44502 be exploited remotely?
Yes, CVE-2021-44502 can potentially be exploited by an attacker with the right crafted input.