Yottadb

18 CVEs across 2 Yottadb products. Browse Yottadb vulnerabilities, severities, and proof-of-concept exploits.

Yottadb products with known CVEs

ProductCVEs
Yottadb16
Gt.m2
Yottadb CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-44506High7.52022-04-15An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to do_verify in sr_unix/do_verify…
CVE-2021-44505High7.52022-04-15An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a NULL pointer dereference…
CVE-2021-44495High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer derefere…
CVE-2021-44494High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash…
CVE-2021-44493High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to f…
CVE-2021-44492High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly…
CVE-2021-44491High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3…
CVE-2021-44490High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3…
CVE-2021-44489High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in…
CVE-2021-44488Critical9.12022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op_fnfnumber…
CVE-2021-44487High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the…
CVE-2021-44486Critical9.82022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write i…
CVE-2021-44485High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the applicati…
CVE-2021-44484High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to crash the…
CVE-2021-44483High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash t…
CVE-2021-44482High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to atte…
CVE-2021-44481High7.52022-04-15An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in check_and_set_timeout in sr_unix/ztimeoutro…
CVE-2021-27377Critical9.82021-02-18An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev_st have a…