Red Hat Security AdvisoryRHSA-2019:2336
unixODBC security update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) unixODBC-2.3.1-14.el7
- Red Hat Enterprise Linux Client Optional (v. 7) unixODBC-devel-2.3.1-14.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) unixODBC-2.3.1-14.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) unixODBC-devel-2.3.1-14.el7
- Red Hat Enterprise Linux Server (v. 7) unixODBC-2.3.1-14.el7, unixODBC-2.3.1-14.el7.ppc, unixODBC-devel-2.3.1-14.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) unixODBC-2.3.1-14.el7, unixODBC-devel-2.3.1-14.el7
Fixes 2 records
Priority MEDIUM 48
The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03024 · Published 2018-02-26 · Partial fix CWE-119
Priority MEDIUM 47
In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02545 · Published 2018-02-22 · Partial fix CWE-119
