Lucene search

K
osvGoogleOSV:SUSE-SU-2024:2978-1
HistoryAug 20, 2024 - 9:07 a.m.

Security update for unixODBC

2024-08-2009:07:09
Google
osv.dev
unixodbc
security update
out of bounds
stack write
64-bit architectures
cve-2024-1013
pointer-to-integer types conversion
bsc#1228143
software

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

7.2

Confidence

Low

This update for unixODBC fixes the following issues:

  • CVE-2024-1013: Fixed out of bounds stack write due to pointer-to-integer types conversion on 64-bit architectures (bsc#1228143)

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

7.2

Confidence

Low