CVE-2021-44506

Vulnerability

An issue exists in FIS GT.M through V7.0-000 (and the related YottaDB code base) in the do_verify function in sr_unix/do_verify.c. The lack of input validation allows an attacker to corrupt a function pointer, potentially leading to a jump to a NULL pointer. This affects GT.M versions up to V7.0-000 and YottaDB versions prior to r1.34.

Exploitation

An attacker must be able to corrupt the function pointer, which may be achieved through crafted input or other means. No specific authentication or network position is required beyond the ability to reach the vulnerable code path. The attack results in an attempt to dereference a NULL pointer.

Impact

Successful exploitation causes a NULL pointer dereference, leading to a crash and denial of service. No code execution or privilege escalation is indicated.

Mitigation

A fix is available in YottaDB r1.34 [2]. For GT.M, users should monitor for updates from FIS. If no patch is yet available, consider restricting access to the affected functionality as a workaround.