unixODBC <=2.3.14 vulnerable to rude truncation causing out-of-bounds memcpy
Rude truncation of 64-bit SQLLEN buffer_length to 32-bit int in unixODBC <=2.3.14 enables potential out-of-bounds memory writes.
3 stories, newest first · one card per story
Rude truncation of 64-bit SQLLEN buffer_length to 32-bit int in unixODBC <=2.3.14 enables potential out-of-bounds memory writes.

Canadian Centre for Cyber Security advisory AV26-1115 warns psqlODBC users must upgrade to 18.00.0006 to fix large-object read buffer overflow in ODBC escape parser.
Ubuntu patches Shibboleth SQL injection in the ODBC storage plugin allowing remote attackers to extract sensitive information.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views