
Cloud Vulnerability DB
A community-led vulnerabilities database
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a size variable, stored as a signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memcpy call on the stack, causing a memory segmentation fault (NVD).
The vulnerability has a CVSS v3.1 Base Score of 7.5 HIGH with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability is related to incorrect calculation (CWE-682) where a signed integer variable can be manipulated to contain an extremely large value that gets interpreted as negative during validation checks (NVD).
When exploited, this vulnerability can cause a memory segmentation fault in the application, leading to a denial of service condition. The CVSS scoring indicates high impact on availability with no direct impact on confidentiality or integrity (NVD).
The vulnerability was addressed in GT.M version V7.0-002. Users should upgrade to this or a later version to mitigate the vulnerability (GT.M Release Notes).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."