The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.
| Software | From | Fixed in |
|---|---|---|
| unixodbc / unixodbc | - | 2.2.14.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 9.0 | 9.0.x |
| debian / debian_linux | 10.0 | 10.0.x |
| opensuse / opensuse | 11.4 | 11.4.x |
| opensuse / opensuse | 11.3 | 11.3.x |
| redhat / enterprise_linux | 4.0 | 4.0.x |
| redhat / enterprise_linux | 6.0 | 6.0.x |
| redhat / enterprise_linux | 5.0 | 5.0.x |