CVE-2024-1013

Published: Mar 18, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD (Secondary)

Description

An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.

Affected (1)

Products: Unixodbc: Unixodbc

Unixodbc

1 product

Unixodbc

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Unixodbc Unixodbc	All versions

Related CWEs

CWE-823

Use of Out-of-range Pointer Offset

The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

References (6)

https://access.redhat.com/security/cve/CVE-2024-1013

Source: secalert@redhat.com

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=2260823

Source: secalert@redhat.com

Issue Tracking

https://github.com/lurcher/unixODBC/pull/157

Source: secalert@redhat.com

Issue Tracking

https://access.redhat.com/security/cve/CVE-2024-1013

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=2260823

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://github.com/lurcher/unixODBC/pull/157

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

Timeline

No history available yet.