VYPR
Unrated severityNVD Advisory· Published Apr 15, 2022· Updated Aug 4, 2024

CVE-2021-44483

CVE-2021-44483

Description

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

YottaDB through r1.32 and V7.0-000 crashes via divide-by-zero due to missing input validation in eb_div.

Vulnerability

A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows a divide-by-zero error. Affected versions are YottaDB through r1.32 and GT.M V7.0-000. The issue was discovered during fuzz testing and is tracked in YottaDB/DB/YDB issue #828 [1].

Exploitation

An attacker can trigger the divide-by-zero by supplying crafted input that results in a zero divisor being passed to the eb_div function. No special privileges or authentication are required; the attacker only needs to send specially crafted data to the application.

Impact

Successful exploitation causes a crash of the application (denial of service). No data disclosure or arbitrary code execution is reported from the available references.

Mitigation

A fix is included in YottaDB r1.34, released on or around the time of this CVE publication. Users should update to r1.34 or later. No workaround is documented for unpatched versions [1].

AI Insight generated on May 27, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

2
  • YottaDB/YottaDBdescription
  • YottaDB/YottaDBllm-fuzzy
    Range: through r1.32

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.