An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.
{ "binaries": [ { "binary_name": "fis-gtm", "binary_version": "6.2-002A-2ubuntu0.1~esm1" }, { "binary_name": "fis-gtm-6.2-002", "binary_version": "6.2-002A-2ubuntu0.1~esm1" } ] }
{ "binaries": [ { "binary_name": "fis-gtm", "binary_version": "6.3-003A-2ubuntu0.1~esm1" }, { "binary_name": "fis-gtm-6.3-003a", "binary_version": "6.3-003A-2ubuntu0.1~esm1" } ] }
{ "binaries": [ { "binary_name": "fis-gtm", "binary_version": "6.3-007-1ubuntu0.1~esm1" }, { "binary_name": "fis-gtm-6.3-007", "binary_version": "6.3-007-1ubuntu0.1~esm1" } ] }
{ "binaries": [ { "binary_name": "fis-gtm", "binary_version": "6.3-014-3" }, { "binary_name": "fis-gtm-6.3-014", "binary_version": "6.3-014-3" } ] }