CVE-2021-44510: High severity Fisglobal Gt.m vulnerability
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/fis-gtmto a version that resolves this vulnerability.Fixed in 7.0-005-1Fixed in 7.1-006-1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44510?
CVE-2021-44510 has a medium severity due to its potential to cause application crashes.
How do I fix CVE-2021-44510?
To fix CVE-2021-44510, upgrade FIS GT.M to version 7.0-002 or later.
What types of attacks are possible with CVE-2021-44510?
CVE-2021-44510 allows attackers to exploit input handling to cause segmentation faults.
What software is affected by CVE-2021-44510?
CVE-2021-44510 affects FIS GT.M versions up to and including 7.0-000.
Is CVE-2021-44510 related to YottaDB?
Yes, CVE-2021-44510 is related to the YottaDB code base.