CVE-2021-44490

An issue was discovered in YottaDB through r1.32 and V7.0-000

published April 15, 2022

CVSS
—
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a "- (digs < 1 ? 1 : digs)" subtraction.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01016 · 63.0th percentile
Published
2022-04-15T17:24Z
EPSS history
Timeline
  • 15 APR 17:24Z
    An issue was discovered in YottaDB through r1.32 and V7.0-000
    cvelistv5