YottaDB up to 1.32/7.0-000 Parameter Validation ztimeoutroutines.c check_and_set_timeout null pointer dereference

Summaryinfo

A vulnerability was found in YottaDB up to 1.32/7.0-000. It has been classified as problematic. This impacts the function check_and_set_timeout of the file sr_unix/ztimeoutroutines.c of the component Parameter Validation Handler. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2021-44481. There is no available exploit.

Detailsinfo

A vulnerability was found in YottaDB up to 1.32/7.0-000. It has been declared as problematic. Affected by this vulnerability is the function check_and_set_timeout of the file sr_unix/ztimeoutroutines.c of the component Parameter Validation Handler. The manipulation with an unknown input leads to a null pointer dereference vulnerability. The CWE definition for the vulnerability is CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. As an impact it is known to affect availability.

The weakness was presented 04/15/2022 as 828. It is possible to read the advisory at gitlab.com. This vulnerability is known as CVE-2021-44481 since 12/01/2021. Technical details of the vulnerability are known, but there is no available exploit.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• YottaDB

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 7

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion