Vulnerabilities > Unixodbc > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-02-26 CVE-2018-7485 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unixodbc 2.3.5
The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact.
network
low complexity
unixodbc CWE-119
critical
9.8
2018-02-22 CVE-2018-7409 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unixodbc
In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.
network
low complexity
unixodbc CWE-119
critical
9.8