Red Hat Security AdvisoryRHSA-2020:4999
unixODBC security update
Released 2020-11-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) unixODBC-2.3.1-14.el7_6
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) unixODBC-devel-2.3.1-14.el7_6
- Red Hat Enterprise Linux Server EUS (v. 7.6) unixODBC-2.3.1-14.el7_6, unixODBC-2.3.1-14.el7_6.ppc, unixODBC-devel-2.3.1-14.el7_6 +1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) unixODBC-2.3.1-14.el7_6, unixODBC-devel-2.3.1-14.el7_6
Fixes 2 records
Priority MEDIUM 48
The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03024 · Published 2018-02-26 · Partial fix CWE-119
Priority MEDIUM 47
In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02545 · Published 2018-02-22 · Partial fix CWE-119
