← Vulnerability feed

Vulnerability record · CVE-2024-1013 · published 18 March 2024

CVE-2024-1013: Unixodbc vulnerability

Unixodbc · Unixodbc

An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.

7.8 CVSS 3.1 High EPSS 0.28% · top 80.9% CWE-823 · CWE-823
7.8CVSS 3.1 base score
0.28%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://access.redhat.com/security/cve/CVE-2024-1013 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=2260823 Issue Tracking
https://github.com/lurcher/unixODBC/pull/157 Issue Tracking
https://access.redhat.com/security/cve/CVE-2024-1013 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=2260823 Issue Tracking
https://github.com/lurcher/unixODBC/pull/157 Issue Tracking

Track CVE-2024-1013 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-7485Unixodbc memory buffer overflow vulnerabilityThe SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to caus…EPSS 3.0%9.8CVE-2018-7409Unixodbc memory buffer overflow vulnerabilityIn unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.EPSS 2.5%7.8CVE-2011-1145Unixodbc classic buffer overflow vulnerabilityThe SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE para…EPSS 0.45%2.1CVE-2012-2658Unixodbc memory buffer overflow vulnerabilityBuffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local users to cause a denial of service (crash) via a long string in the D…EPSS 0.51%2.1CVE-2012-2657Unixodbc memory buffer overflow vulnerabilityBuffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a denial of service (crash) via a…EPSS 0.44%7.8CVE-2023-33106Qualcomm GPU AUX Command Sync Point Memory CorruptionCVE-2023-33106 is a memory corruption flaw in Qualcomm chipsets triggered when a large list of sync points is submitted in an AUX command to the IOCT…KEVEPSS 0.79%analysed

Source: NIST National Vulnerability Database (record CVE-2024-1013), CISA KEV, FIRST EPSS (scores of 2026-10-07). This page is refreshed as NVD updates the record.