YottaDB up to 1.32/7.0-000 sr_unix/ious_open.c ious_open null pointer dereference

Summaryinfo

A vulnerability identified as problematic has been detected in YottaDB up to 1.32/7.0-000. This affects the function ious_open of the file sr_unix/ious_open.c. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2021-44487. No exploit exists.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in YottaDB up to 1.32/7.0-000. This issue affects the function ious_open of the file sr_unix/ious_open.c. The manipulation with an unknown input leads to a null pointer dereference vulnerability. Using CWE to declare the problem leads to CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. Impacted is availability.

The weakness was disclosed 04/15/2022 as 828. It is possible to read the advisory at gitlab.com. The identification of this vulnerability is CVE-2021-44487 since 12/01/2021. Technical details of the vulnerability are known, but there is no available exploit.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Name

• YottaDB

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 7

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion