VYPR
← All advisories
High severity7.8NVD Advisory· Published Nov 14, 2019· Updated Jun 16, 2026

CVE-2011-1145

CVE-2011-1145

Description

The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Unixodbc/Unixodbcllm-fuzzy3 versions
    <2.2.14p2+ 2 more
    • (no CPE)range: <2.2.14p2
    • (no CPE)range: before 2.2.14p2
    • cpe:2.3:a:unixodbc:unixodbc:*:*:*:*:*:*:*:*range: <=2.2.14
  • Debian/linux3 versions
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • OpenSUSE/openSUSE2 versions
    cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server3 versions
    cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/unixODBC&distro=openSUSE%20Tumbleweed
    Range: < 2.3.4-3.5

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.