Summary
Felix Wilhelm discovered that FreeTDS incorrectly handled certain types
after a protocol downgrade. A remote attacker could use this issue to cause
FreeTDS to crash, resulting in a denial of service, or possibly execute
arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | freetds | 1.00.82-2ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
FreeTDS through 1.1.11 has a Buffer Overflow.
References
-
report
https://ubuntu.com/security/CVE-2019-13508