This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-44496 →

DEBIAN-CVE-2021-44496

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variabl...

Original description

The description as published by the source.

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data structures and gain control of the flow of execution.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 fis-gtm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 fis-gtm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1-006-1"}]}]

Debian:14 fis-gtm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1-006-1"}]}]

References

advisory security-tracker.debian.org