MiracleLinux 7 : unixODBC-2.3.1-14.el7 (AXSA:2019-4101:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4101:01 advisory. unixODBC: Buffer overflow in unicodetoansicopy can lead to crash or other unspecified impact CVE-2018-7409 unixODBC: Insecure buffer copy in...

The vulnerability of the ODBC library for UNIX systems, related to the pointer displacement beyond the allocated memory range, allows attackers to access confidential data and also trigger a service failure.

The vulnerability of the ODBC library for UNIX systems is related to the pointer shifting beyond the allocated memory range. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

CLSA-2024-1712261674 unixODBC: Fix of CVE-2024-1013

CVE-2024-1013: Fix out-of-bounds stack write by adjusting byte size in callee function...

Asterisk -- func_odbc: Possible SQL Injection

The Asterisk project reports: Some databases can use backslashes to escape certain characters, such as backticks. If input is provided to funcodbc which includes backslashes it is possible for funcodbc to construct a broken SQL query and the SQL query to fail...

The vulnerability of the unicode_to_ansi_copy() function in the DriverManager/__info.c file of the ODBC library for UNIX UnixODBC allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the unicodetoansicopy function in the DriverManager/info.c file of the ODBC library for UNIX UnixODBC is related to the operation exceeding the allowable buffer data size limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...