YottaDB up to 1.32/7.0-000 sr_unix/do_verify.c do_verify null pointer dereference

Summaryinfo

A vulnerability was found in YottaDB up to 1.32/7.0-000. It has been declared as problematic. Affected is the function do_verify of the file sr_unix/do_verify.c. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2021-44482. There is no exploit available.

Detailsinfo

A vulnerability was found in YottaDB up to 1.32/7.0-000. It has been rated as problematic. Affected by this issue is the function do_verify of the file sr_unix/do_verify.c. The manipulation with an unknown input leads to a null pointer dereference vulnerability. Using CWE to declare the problem leads to CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. Impacted is availability.

The weakness was shared 04/15/2022 as 828. The advisory is shared for download at gitlab.com. This vulnerability is handled as CVE-2021-44482 since 12/01/2021. There are known technical details, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• YottaDB

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 7

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion