An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-unixodbcamazon-linux-ami-2-upgrade-unixodbc-debuginfoamazon-linux-ami-2-upgrade-unixodbc-devel | Jun 13, 2024 | Mar 18, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-unixodbcamazon-linux-2023-upgrade-unixodbc-debuginfoamazon-linux-2023-upgrade-unixodbc-debugsourceamazon-linux-2023-upgrade-unixodbc-devel | Feb 17, 2025 | Mar 18, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Mar 18, 2024 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Mar 18, 2024 |
| Suse | — | suse-upgrade-libodbc2suse-upgrade-libodbc2-32bitsuse-upgrade-unixodbcsuse-upgrade-unixodbc-32bitsuse-upgrade-unixodbc-devel | Aug 21, 2024 | Mar 18, 2024 |
| Ubuntu | ubuntu-pro-upgrade-libodbc1ubuntu-pro-upgrade-unixodbcubuntu-upgrade-libodbc1ubuntu-upgrade-libodbc2ubuntu-upgrade-unixodbc | Mar 28, 2024 | Mar 18, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub