An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "fis-gtm", "binary_version": "7.0-005-2.1" }, { "binary_name": "fis-gtm-7.0", "binary_version": "7.0-005-2.1" }, { "binary_name": "fis-gtm-7.0-dbgsym", "binary_version": "7.0-005-2.1" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "fis-gtm", "binary_version": "7.0-005-1build2" }, { "binary_name": "fis-gtm-7.0", "binary_version": "7.0-005-1build2" }, { "binary_name": "fis-gtm-7.0-dbgsym", "binary_version": "7.0-005-1build2" } ], "ubuntu_priority": "medium" }