PT-2022-12130

CVE-2021-44483

·

Published

2022-04-15

·

Updated

2022-04-22

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions YottaDB versions prior to r1.32 and V7.0-000
Description The issue is related to a lack of input validation in calls to the eb div function in the sr port/eb muldiv.c file, which allows attackers to crash the application by performing a divide by zero operation.
Recommendations For YottaDB versions prior to r1.32 and V7.0-000, consider adding input validation to the eb div function to prevent divide by zero operations as a temporary workaround until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾