High USN-6715-1 1 CVE

unixodbc vulnerability

Published Mar 27, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that unixODBC incorrectly handled certain bytes.
An attacker could use this issue to execute arbitrary code or cause
a crash.

Fixed packages 4

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	unixodbc	2.3.6-0.1ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS	unixodbc	2.3.9-5ubuntu0.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	unixodbc	2.3.1-4.1ubuntu0.1~esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	unixodbc	2.3.4-1.1ubuntu3+esm1

Vulnerabilities 1

High 7.8

CVE-2024-1013

Unixodbc: out of bounds stack write due to pointer-to-integer types conversion

An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi

Mar 18, 2024

References

report
https://ubuntu.com/security/CVE-2024-1013