unixODBC <=2.3.14 Multiple Heap Buffer Overflows
Original title: unixODBC <=2.3.14 Multiple Heap Buffer Overflows, Underflows, and Over-Reads
Heap buffer overflows, underflows, and over-reads in unixODBC can corrupt shared heap state across connections and cause denial of service.
unixODBC versions 2.3.14 and below contain multiple heap buffer overflows, underflows, and over-reads. Attackers who can influence various arguments passed thereto can trigger the heap-based buffer overflows inside of the unixODBC driver manager itself, potentially corrupting the shared heap state across connections, crash the driver manager (thereby causing denial of service conditions, multi-tenant data loss, and such related issues.
- Heap buffer overflows inside unixODBC driver manager
- Corruption of shared heap state across connections
- Denial of service conditions
- Multi-tenant data loss
Impact: heap buffer overflows that corrupt shared heap state and cause DoS
- Vendors
- unixODBC
From the original article
Posted by Daniel Owens via Fulldisclosure on Nov 04 unixODBC versions 2. 3. 14 and below contain multiple heap buffer overflows, underflows, and over-reads.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.