← All advisories

Critical severity9.8NVD Advisory· Published Feb 22, 2018· Updated Jun 17, 2026

CVE-2018-7409

CVE-2018-7409

Description

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Unixodbc/Unixodbcllm-fuzzy
Range: <2.3.5
osv-coords5 versions
pkg:rpm/opensuse/unixODBC&distro=openSUSE%20Tumbleweed pkg:rpm/suse/unixODBC&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/unixODBC&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/unixODBC&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/unixODBC&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
< 2.3.9-3.4+ 4 more
- (no CPE)range: < 2.3.9-3.4
- (no CPE)range: < 2.3.6-7.9.1
- (no CPE)range: < 2.3.6-7.9.1
- (no CPE)range: < 2.3.6-7.9.1
- (no CPE)range: < 2.3.6-7.9.1

Patches

Vulnerability mechanics

References

3

www.unixodbc.org/unixODBC-2.3.5.tar.gznvdProduct
sourceforge.net/projects/unixodbc/files/unixODBC/2.3.5/ChangeLog/downloadnvdRelease Notes
access.redhat.com/errata/RHSA-2019:2336nvd

News mentions

0

No linked articles in our index yet.