Summary
It was discovered that unixODBC incorrectly handled certain unicode
to ansi copies. An attacker could possibly use this issue to cause
a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | unixodbc | 2.2.14p2-5ubuntu5+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | unixodbc | 2.3.1-4.1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.
References
-
report
https://ubuntu.com/security/CVE-2018-7409