Lucene search

K
mageiaGentoo FoundationMGASA-2024-0106
HistoryApr 01, 2024 - 10:50 p.m.

Updated unixODBC packages fix security vulnerability

2024-04-0122:50:27
Gentoo Foundation
advisories.mageia.org
20
unixodbc
security vulnerability
code execution
crash

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

8

Confidence

Low

EPSS

0

Percentile

15.5%

It was discovered that unixODBC incorrectly handled certain bytes. An attacker could use this issue to execute arbitrary code or cause a crash.

OSVersionArchitecturePackageVersionFilename
Mageia9noarchunixodbc< 2.3.11-1.1unixODBC-2.3.11-1.1.mga9

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

8

Confidence

Low

EPSS

0

Percentile

15.5%