CVE-2021-44504: High severity yottadb vulnerability
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memcpy call on the stack, causing a memory segmentation fault.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44504?
CVE-2021-44504 has been classified as a medium severity vulnerability.
How do I fix CVE-2021-44504?
To fix CVE-2021-44504, upgrade to FIS GT.M version 7.0-002 or later.
What systems are affected by CVE-2021-44504?
CVE-2021-44504 affects FIS GT.M versions up to 7.0-000.
What type of attack is possible with CVE-2021-44504?
An attacker can exploit CVE-2021-44504 to manipulate size variables leading to potential memory corruption.
What is the underlying issue of CVE-2021-44504?
The underlying issue of CVE-2021-44504 involves the improper handling of signed integers, causing large values to be interpreted incorrectly.