unixODBC <=2.3.14 Multiple Races
Data races in connection-pooling state data and races between teardown and error-handling can cause double-frees and use-after-frees.
The unixODBC driver manager library contains multiple races of importance. These include a set of data races in the connection-pooling configuration state data that can cause one thread to read a half-written pool-size or timeout value, which can lead to a variety of harmful effects. There is also a race between teardown and error-handling functionality that can result in double-frees and use-after-frees.
- Data races in connection-pooling state data
- Race between teardown and error-handling
- Potential for double-frees and use-after-frees
- Harmful effects from half-written values
Impact: data races leading to harmful effects and double-frees and use-after-frees
From the original article
Posted by Daniel Owens via Fulldisclosure on Nov 04 The unixODBC driver manager library contains multiple races of importance / interest, including a set of data races in the connection-pooling configuration state data that can cause one thread to read a half-written pool-size or timeout value, which can lead to a variety of harmful effects, as well as a race between teardown and error-handling functionality that…
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.