An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.
{ "binaries": [ { "binary_version": "6.2-002A-2ubuntu0.1~esm1", "binary_name": "fis-gtm" }, { "binary_version": "6.2-002A-2ubuntu0.1~esm1", "binary_name": "fis-gtm-6.2-002" } ] }
{ "binaries": [ { "binary_version": "6.3-003A-2ubuntu0.1~esm1", "binary_name": "fis-gtm" }, { "binary_version": "6.3-003A-2ubuntu0.1~esm1", "binary_name": "fis-gtm-6.3-003a" } ] }
{ "binaries": [ { "binary_version": "6.3-007-1ubuntu0.1~esm1", "binary_name": "fis-gtm" }, { "binary_version": "6.3-007-1ubuntu0.1~esm1", "binary_name": "fis-gtm-6.3-007" } ] }
{ "binaries": [ { "binary_version": "6.3-014-3", "binary_name": "fis-gtm" }, { "binary_version": "6.3-014-3", "binary_name": "fis-gtm-6.3-014" } ] }