← Vulnerability feed

Vulnerability record · CVE-2018-7409 · published 22 February 2018

CVE-2018-7409: Unixodbc memory buffer overflow vulnerability

Unixodbc · Unixodbc

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

9.8 CVSS 3.0 Critical EPSS 2.5% · top 15.5% CWE-119 · Memory buffer overflow
9.8CVSS 3.0 base score, v2 7.5
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.unixodbc.org/unixODBC-2.3.5.tar.gz Product
https://access.redhat.com/errata/RHSA-2019:2336
https://sourceforge.net/projects/unixodbc/files/unixODBC/2.3.5/ChangeLog/download Release Notes
http://www.unixodbc.org/unixODBC-2.3.5.tar.gz Product
https://access.redhat.com/errata/RHSA-2019:2336
https://sourceforge.net/projects/unixodbc/files/unixODBC/2.3.5/ChangeLog/download Release Notes

Track CVE-2018-7409 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-7485Unixodbc memory buffer overflow vulnerabilityThe SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to caus…EPSS 3.0%7.8CVE-2024-1013Unixodbc vulnerabilityAn out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue ma…EPSS 0.28%7.8CVE-2011-1145Unixodbc classic buffer overflow vulnerabilityThe SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE para…EPSS 0.45%2.1CVE-2012-2658Unixodbc memory buffer overflow vulnerabilityBuffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local users to cause a denial of service (crash) via a long string in the D…EPSS 0.51%2.1CVE-2012-2657Unixodbc memory buffer overflow vulnerabilityBuffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a denial of service (crash) via a…EPSS 0.44%8.7CVE-2026-88779Citrix netscaler application delivery controller memory buffer overflow vulnerabilityVulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and befor…KEVEPSS 0.28%9.5CVE-2026-88772Citrix netscaler application delivery controller memory buffer overflow vulnerabilityVulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 F…KEVEPSS 1.3%8.8CVE-2026-8452Citrix NetScaler ADC and Gateway memory buffer overflow causes DoSCVE-2026-8452 is a memory buffer overflow (CWE-119) in Citrix NetScaler ADC and NetScaler Gateway that leads to unpredictable or erroneous behavior a…KEVEPSS 1.0%analysed

Source: NIST National Vulnerability Database (record CVE-2018-7409), CISA KEV, FIRST EPSS (scores of 2026-10-03). This page is refreshed as NVD updates the record.