CVE-2024-1013 Unixodbc: out of bounds stack write due to pointer-to-integer types conversion

🗓️ 18 Mar 2024 10:53:02Reported by redhatType

Unixodbc out-of-bounds stack write flaw on 64-bit architecture

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to stack overflows due to the unixODBC package (CVE-2024-1013)	2 Sep 202514:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) has addressed multiple vulnerabilities	17 Sep 202513:40	–	ibm
Tenable Nessus	Amazon Linux 2023 : unixODBC, unixODBC-devel (ALAS2023-2024-641)	10 Jun 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : unixODBC (ALAS-2024-2565)	12 Jun 202400:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: unixODBC (CVE-2024-1013)	25 Mar 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: unixODBC (CVE-2024-1013)	3 Jul 202400:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : unixODBC Vulnerability (NS-SA-2025-0116)	25 Jul 202500:00	–	nessus
Tenable Nessus	Photon OS 4.0: Unixodbc PHSA-2024-4.0-0613	24 Jul 202400:00	–	nessus
Tenable Nessus	Photon OS 5.0: Unixodbc PHSA-2024-5.0-0256	24 Jul 202400:00	–	nessus
Tenable Nessus	RHEL 6 : unixodbc (Unpatched Vulnerability)	11 May 202400:00	–	nessus

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "unixODBC",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "compat-unixODBC234",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "unixODBC",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "unixODBC",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "unixODBC",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  }
]

Source	Link
github	www.github.com/lurcher/unixODBC/pull/157
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/security/cve/CVE-2024-1013

20 Nov 2025 18:11Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.8

EPSS0.00069

CWE-823