CVE-2018-7485 The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified....
CriticalCVSS 9.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| unixodbc | = 2.3.5 | No fix listed |
References
- 103193 third-party-advisory vdb-entry
- RHSA-2019:2336 vendor-advisory
- github.com patch
- Debian Security Tracker CVE-2018-7485 vendor-advisory