CVE-2021-44496

Vulnerability

A buffer overflow vulnerability exists in FIS GT.M through V7.0-000 (and the related YottaDB code base). An attacker can control the size variable and buffer passed to a memcpy call using crafted input, leading to memory corruption [1]. Affected versions include GT.M up to V7.0-000 [1]. The issue was identified during fuzz testing of the YottaDB codebase and is one of 40 bugs fixed in the r1.34 release [2].

Exploitation

An attacker can supply specially crafted input to the affected application. This input manipulates the size and buffer arguments to memcpy, allowing the attacker to write past the intended buffer boundaries. No authentication is required if the attacker can deliver the malicious input to the vulnerable code path (e.g., via network messages or file parsing) [2].

Impact

Successful exploitation allows the attacker to overwrite key data structures in memory. By controlling the flow of execution through such corruption, the attacker can potentially achieve arbitrary code execution, leading to full compromise of confidentiality, integrity, and availability [1].

Mitigation

The vendor has fixed these bugs in YottaDB r1.34 release [2]. For FIS GT.M, users should apply the latest updates from the project's sourceforge page [1]. There is no indication that this CVE is listed in the CISA Known Exploited Vulnerabilities catalog.