An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.
{ "binaries": [ { "binary_name": "fis-gtm", "binary_version": "7.0-005-2.1" }, { "binary_name": "fis-gtm-7.0", "binary_version": "7.0-005-2.1" }, { "binary_name": "fis-gtm-7.0-dbgsym", "binary_version": "7.0-005-2.1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "fis-gtm", "binary_version": "7.0-005-1build2" }, { "binary_name": "fis-gtm-7.0", "binary_version": "7.0-005-1build2" }, { "binary_name": "fis-gtm-7.0-dbgsym", "binary_version": "7.0-005-1build2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }