CVE-2021-44508: Null Pointer Dereference
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of NULL checks in calls to iousopen in srunix/iousopen.c allows attackers to crash the application by dereferencing a NULL pointer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/fis-gtmto a version that resolves this vulnerability.Fixed in 7.0-005-1Fixed in 7.1-006-1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44508?
CVE-2021-44508 is considered to have a high severity due to its potential to cause application crashes.
How do I fix CVE-2021-44508?
To fix CVE-2021-44508, upgrade to version 7.0-005-1 or 7.1-006-1 of FIS GT.M.
What types of attacks can exploit CVE-2021-44508?
CVE-2021-44508 can be exploited through denial of service attacks by dereferencing a NULL pointer.
Which versions of FIS GT.M are affected by CVE-2021-44508?
FIS GT.M versions up to 7.0-000 are affected by CVE-2021-44508.
Is there a specific platform or environment vulnerable to CVE-2021-44508?
CVE-2021-44508 affects systems utilizing FIS GT.M, particularly within Unix and Linux environments.