CVE-2023-34364

Progress DataDirect Connect for ODBC (Oracle) prior to 08.02.2770 contains a buffer overflow caused by overly large option values in a connection string, overrunning the processing buffer and enabling remote code execution. The root cause is improper bounds checking on certain connection-string o...

CVE-2023-34363

Summary of CVE-2023-34363 : Progress DataDirect Connect for ODBC (Oracle) prior to 08.02.2770 uses Oracle Advanced Security (OAS) encryption. If an error occurs while initializing the encryption object, the code falls back to an alternate encryption mechanism that uses a cryptographically weak, i...