Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2021-44494 →

DEBIAN-CVE-2021-44494

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 fis-gtm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0-002-1"}]}]

Debian:13 fis-gtm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0-002-1"}]}]

Debian:14 fis-gtm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0-002-1"}]}]

Références

advisory security-tracker.debian.org