PT-2022-12134
CVE-2021-44487
·
تاريخ النشر
2022-04-15
·
تاريخ التحديث
2022-04-22
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
YottaDB versions prior to r1.32 and V7.0-000
Description
The issue is related to a lack of NULL checks in calls to the
ious open function in the sr unix/ious open.c file, which allows attackers to crash the application by dereferencing a NULL pointer.Recommendations
For YottaDB versions prior to r1.32 and V7.0-000, consider applying a patch or fix that adds NULL checks to the
ious open function calls to prevent the application from crashing due to NULL pointer dereferences.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾