Lucene search

K
osvGoogleOSV:CVE-2024-1013
HistoryMar 18, 2024 - 11:15 a.m.

CVE-2024-1013

2024-03-1811:15:09
Google
osv.dev
2
cve-2024-1013
unixodbc
out-of-bounds
stack write
64-bit
architectures
little-endian
big-endian
software

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%