Summary
It was discovered that FIS-GT.M could incorrectly dereference memory in
certain instances. An attacker could possibly use this issue to cause
FIS-GT.M to crash, resulting in a denial of service.
(CVE-2021-44492, CVE-2021-44498, CVE-2021-44508)
It was discovered that FIS-GT.M could perform a division by zero due to
a lack of input validation. An attacker could possibly use this issue to
cause FIS-GT.M to crash, resulting in a denial of service.
(CVE-2021-44500)
It was discovered that FIS-GT.M could be forced to allocate memory of a
chosen size through crafted input. An attacker could possibly use this
issue to exhaust the available memory of FIS-GT.M, leading to a crash
that would result in a denial of service. (CVE-2021-44502)
It was discovered that FIS-GT.M could be forced to read from uninitialized
memory due to a lack of input validation. An attacker could possibly use
this issue to cause FIS-GT.M to crash, resulting in a denial of service,
or execute arbitrary code. (CVE-2021-44506)
It was discovered that FIS-GT.M could crash due to an integer underflow.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2021-44509, CVE-2021-44510)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | fis-gtm | 6.2-002A-2ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | fis-gtm | 6.3-003A-2ubuntu0.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | fis-gtm | 6.3-007-1ubuntu0.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | fis-gtm | 6.3-014-3ubuntu0.1~esm1 |
Vulnerabilities 8
-
Unscored —
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attac…
-
Unscored —
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers…
-
Unscored —
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in …
-
Unscored —
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attack…
-
Unscored —
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in …
-
Unscored —
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of NULL checks in calls…
-
Unscored —
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers…
-
Unscored —
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers…
References
-
report
https://ubuntu.com/security/CVE-2021-44492
-
report
https://ubuntu.com/security/CVE-2021-44498
-
report
https://ubuntu.com/security/CVE-2021-44500
-
report
https://ubuntu.com/security/CVE-2021-44502
-
report
https://ubuntu.com/security/CVE-2021-44506
-
report
https://ubuntu.com/security/CVE-2021-44508
-
report
https://ubuntu.com/security/CVE-2021-44509
-
report
https://ubuntu.com/security/CVE-2021-44510