PT-2018-3639 · Unixodbc+5 · Unixodbc+5

Publicado

2018-02-22

·

Atualizado

2024-06-15

·

CVE-2018-7409

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions unixODBC versions prior to 2.3.5
Description The issue is related to a buffer overflow in the unicode to ansi copy() function in DriverManager/ info.c. This can potentially allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations For versions prior to 2.3.5, update to version 2.3.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the unicode to ansi copy() function until a patch is available.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2019-1715
BDU:2021-01498
CESA-2019_2336
CVE-2018-7409
MGASA-2018-0379
OPENSUSE-SU-2018_1845-1
OPENSUSE-SU-2024:11483-1
RHSA-2019:2336
RHSA-2019_2336
RHSA-2020:4999
SUSE-SU-2018:1832-1
SUSE-SU-2018_1832-1
USN-6276-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Ubuntu
Unixodbc