An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop.
{ "ubuntu_priority": "medium", "binaries": [ { "binary_name": "fis-gtm", "binary_version": "7.0-005-2.1" }, { "binary_name": "fis-gtm-7.0", "binary_version": "7.0-005-2.1" }, { "binary_name": "fis-gtm-7.0-dbgsym", "binary_version": "7.0-005-2.1" } ], "availability": "No subscription required" }
{ "ubuntu_priority": "medium", "binaries": [ { "binary_name": "fis-gtm", "binary_version": "7.0-005-1build2" }, { "binary_name": "fis-gtm-7.0", "binary_version": "7.0-005-1build2" }, { "binary_name": "fis-gtm-7.0-dbgsym", "binary_version": "7.0-005-1build2" } ], "availability": "No subscription required" }