
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2021-44510 is a vulnerability discovered in FIS GT.M through version V7.0-000 (related to the YottaDB code base). The vulnerability was disclosed on April 15, 2022. The issue affects the calculation of buffer sizes in the software's memory management functions (NVD).
The vulnerability involves crafted input that can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value, leading to a segmentation fault and application crash. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. It is classified as CWE-131 (Incorrect Calculation of Buffer Size) (NVD).
When exploited, this vulnerability can cause a denial of service condition through application crashes. The impact is primarily on the availability of the system, with no direct impact on confidentiality or integrity (NVD).
The vulnerability has been fixed in versions after V7.0-000. Users should upgrade to a patched version. The fix is available in newer releases as indicated by the Debian security tracker showing the status as 'fixed' in newer distributions (Debian Tracker).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."