CVE-2021-44490

Vulnerability

YottaDB through r1.32 and V7.0-000 contains a vulnerability in sr_port/op_fnj3.c where a calculation of the size for memset calls results in an extremely large value due to a - (digs < 1 ? 1 : digs) subtraction. This can be triggered using crafted input, leading to a segmentation fault and application crash [1]. The issue was identified through fuzz testing and fixed in the r1.34 release [1].

Exploitation

An attacker can exploit this vulnerability by providing specially crafted input to YottaDB that triggers the flawed size calculation in op_fnj3. No prior authentication or special privileges are required; the attack can be carried out remotely if the application processes untrusted input. The crafted input causes the memset size to become extremely large, resulting in a segmentation fault.

Impact

Successful exploitation causes a segmentation fault, crashing the YottaDB application. This results in a denial of service (availability impact). The vulnerability does not directly lead to information disclosure or privilege escalation, but service disruption can affect dependent systems.

Mitigation

The issue is fixed in YottaDB r1.34 [1]. Users should upgrade to version r1.34 or later. For earlier versions that are end of life, no patch is available; upgrading to a supported release is recommended. No other workarounds are mentioned in the references.