An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "7.0-005-2.1", "binary_name": "fis-gtm" }, { "binary_version": "7.0-005-2.1", "binary_name": "fis-gtm-7.0" }, { "binary_version": "7.0-005-2.1", "binary_name": "fis-gtm-7.0-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "7.0-005-1build2", "binary_name": "fis-gtm" }, { "binary_version": "7.0-005-1build2", "binary_name": "fis-gtm-7.0" }, { "binary_version": "7.0-005-1build2", "binary_name": "fis-gtm-7.0-dbgsym" } ] }