Buffer overflow in unixODBC - CVE-2018-7409

Vulnerability identifier: #VU11274

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-7409

CWE-ID: CWE-120

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote unauthenticated attacker to cause DoS condition or execute arbitrary code on the target system.

The weakness exists in the unicode_to_ansi_copy() function due to buffer overflow. A remote attacker can send specially crafted input, cause the service to crash or execute arbitrary code.

Successful exploitation of the vulnerability may result in system compromise.

unixODBC
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Server - TUS
Ubuntu
Fedora
openSUSE Leap
libodbc1 (Ubuntu package)
unixodbc (Ubuntu package)
unixODBC (Red Hat package)
unixODBC

Update to version 2.3.5.

libodbc1 (Ubuntu package) - update to Ubuntu Pro
unixodbc (Ubuntu package) - update to Ubuntu Pro
unixODBC (Red Hat package) - update to 2.3.1-14.el7_6
unixODBC - addressed in versions 2.3.7-1.fc27, 2.3.7-1.fc28

• http://www.unixodbc.org/

• Arch Linux update for unixodbc
• OpenSUSE Linux update for unixODBC
• Red Hat update for unixODBC
• Red Hat Enterprise Linux 7.6 update for unixODBC
• Ubuntu update for unixodbc
• Fedora 27 update for unixODBC
• Fedora 28 update for unixODBC