18 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-109448
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, t...
openSUSE 16 Security Update : psqlODBC (openSUSE-SU-2026:22122-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22122-1 advisory. Changes in psqlODBC: Update to 18.00.0005: https://odbc.postgresql.org/docs/release.html Fix heap memory corruption when an application binds more than...
Security update for psqlODBC (moderate)
openSUSE security update: security update for psqlodbc ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22122-1 Rating: moderate References: bsc1285073 Cross-References: CVE-2026-109448 CVSS scores: CVE-2026-109448 SUSE : 5.9...
OPENSUSE-SU-2026:22122-1 Security update for psqlODBC
This update for psqlODBC fixes the following issues: Changes in psqlODBC: Update to 18.00.0005: https://odbc.postgresql.org/docs/release.html Fix heap memory corruption when an application binds more than 32767 parameters on a single statement. SQLBindParameter now rejects parameter numbers outsi...
SUSE CVE-2026-109448
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...
CVE-2026-109448
A flaw was found in postgresql-odbc. An integer wraparound vulnerability in the SQLBindParameter function allows an attacker who controls the number of parameters bound in a database query to corrupt heap memory. By binding an excessively large number of parameters on a single statement, an...
CVE-2026-109448
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...
DEBIAN-CVE-2026-109448
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...
CVE-2026-109448
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...
UBUNTU-CVE-2026-109448
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...
EUVD-2026-97731
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...
CVE-2026-109448 psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...
CVE-2026-109448
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...
CVE-2026-109448
The psqlODBC driver contains an integer wraparound vulnerability in the SQLBindParameter function, affecting versions prior to 18.00.0005 . The root cause is the use of a signed 16-bit field to store the binding count; providing 32,768 parameters causes the count to wrap to -32,768, leading to a ...
CVE-2026-109448 psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...
CVE-2026-109448 psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...
PT-2026-110859
Name of the Vulnerable Software and Affected Versions psqlODBC versions prior to 18.00.0005 Description An integer wraparound in the SQLBindParameter function occurs because the binding count is stored in a signed 16-bit field. When the 32,768th parameter is bound, the count wraps to -32,768...
CVE-2026-109448: Integer Overflow or Wraparound
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to...