CVE-2024-1013

2024-03-1800:00:00

ubuntu.com

cve-2024-1013; unixodbc; out-of-bounds; stack write; little-endian; big-endian; architectures

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

An out-of-bounds stack write flaw was found in unixODBC on 64-bit
architectures where the caller has 4 bytes and callee writes 8 bytes. This
issue may go unnoticed on little-endian architectures, while big-endian
architectures can be broken.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchunixodbc< 2.3.4-1.1ubuntu3+esm1UNKNOWN
ubuntu20.04noarchunixodbc< 2.3.6-0.1ubuntu0.1UNKNOWN
ubuntu22.04noarchunixodbc< 2.3.9-5ubuntu0.1UNKNOWN
ubuntu23.10noarchunixodbc< 2.3.12-1ubuntu0.23.10.1UNKNOWN
ubuntu24.04noarchunixodbc< 2.3.12-1ubuntu0.24.04.1UNKNOWN
ubuntu14.04noarchunixodbc< anyUNKNOWN
ubuntu16.04noarchunixodbc< 2.3.1-4.1ubuntu0.1~esm2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	unixodbc	< 2.3.4-1.1ubuntu3+esm1	UNKNOWN
ubuntu	20.04	noarch	unixodbc	< 2.3.6-0.1ubuntu0.1	UNKNOWN
ubuntu	22.04	noarch	unixodbc	< 2.3.9-5ubuntu0.1	UNKNOWN
ubuntu	23.10	noarch	unixodbc	< 2.3.12-1ubuntu0.23.10.1	UNKNOWN
ubuntu	24.04	noarch	unixodbc	< 2.3.12-1ubuntu0.24.04.1	UNKNOWN
ubuntu	14.04	noarch	unixodbc	< any	UNKNOWN
ubuntu	16.04	noarch	unixodbc	< 2.3.1-4.1ubuntu0.1~esm2	UNKNOWN