An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to va_arg on an empty variadic parameter list, most likely causing a memory segmentation fault.
{ "binaries": [ { "binary_version": "6.2-002A-2ubuntu0.1~esm1", "binary_name": "fis-gtm" }, { "binary_version": "6.2-002A-2ubuntu0.1~esm1", "binary_name": "fis-gtm-6.2-002" } ] }
{ "binaries": [ { "binary_version": "6.3-003A-2ubuntu0.1~esm1", "binary_name": "fis-gtm" }, { "binary_version": "6.3-003A-2ubuntu0.1~esm1", "binary_name": "fis-gtm-6.3-003a" } ] }
{ "binaries": [ { "binary_version": "6.3-007-1ubuntu0.1~esm1", "binary_name": "fis-gtm" }, { "binary_version": "6.3-007-1ubuntu0.1~esm1", "binary_name": "fis-gtm-6.3-007" } ] }
{ "binaries": [ { "binary_version": "6.3-014-3", "binary_name": "fis-gtm" }, { "binary_version": "6.3-014-3", "binary_name": "fis-gtm-6.3-014" } ] }