CVE-2018-7409

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in...

9.8 CriticalFix available

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

2.54%Up 1.7 points since Apr 14, 2021

What each source reports

NVD Score used 9.8

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

Record: CVE-2018-7409
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

Record: CVE-2018-7409
Updated: 2026-11-02

EUVDEUVD-2018-19140 No score

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

Record: EUVD-2018-19140
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2c46-qg5h-fq8x 9.8

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in...

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

Record: GHSA-2c46-qg5h-fq8x
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-119
Updated: 2026-11-02

OSV 9.8

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

Record: CVE-2018-7409
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2018-7409 9.8

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

Record: DEBIAN-CVE-2018-7409
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 8 moreShow less

OSVRHSA-2019:2336 6.8

Red Hat Security Advisory: unixODBC security update

Record: RHSA-2019:2336
CVSS 3.0: 6.8 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:4999 6.8

Red Hat Security Advisory: unixODBC security update

Record: RHSA-2020:4999
CVSS 3.0: 6.8 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2018-7409 9.8

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

Record: UBUNTU-CVE-2018-7409
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVCLSA-2023-1692110840 No score

Fix CVE(s): CVE-2018-7409

SECURITY UPDATE: Fix buffer overflow
- debian/patch/CVE-2018-7409: fix unicode_to_ansi_copy(), don't include NUL-terminator in length in unicode_to_ansi_alloc(), make sure that the error handling doesn't overrun the buffer
- CVE-2018-7409

Record: CLSA-2023-1692110840
Updated: 2026-11-02

OSVMGASA-2018-0379 No score

Updated unixODBC packages fix security vulnerability

unixODBC before version 2.3.5 is vulnerable to a buffer overflow in the DriverManager/__info.c:unicode_to_ansi_copy() method. An attacker could exploit this to cause a denial of service or other unspecified impact (CVE-2018-7409).

The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact (CVE-2018-7485).

Record: MGASA-2018-0379
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11483-1 No score

libodbc2-2.3.9-3.4 on GA media

These are all security issues fixed in the libodbc2-2.3.9-3.4 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11483-1
Updated: 2026-11-02

OSVSUSE-SU-2018:1832-1 No score

Security update for unixODBC

This update for unixODBC to version 2.3.6 fixes the following issues:

CVE-2018-7409: Buffer overflow in unicode_to_ansi_copy() was fixed in 2.3.5 (bsc#1082290)
CVE-2018-7485: Swapped arguments in SQLWriteFileDSN() in odbcinst/SQLWriteFileDSN.c (bsc#1082484)

Other fixes:

Enabled --enable-fastvalidate option in configure (bsc#1044970)

Record: SUSE-SU-2018:1832-1
Updated: 2026-11-02

OSVUSN-6276-1 No score

unixodbc vulnerability

It was discovered that unixODBC incorrectly handled certain unicode to ansi copies. An attacker could possibly use this issue to cause a denial of service.

Record: USN-6276-1
Updated: 2026-11-02

Affected products

unixodbc

Affected packages

Affected packages
Package	Affected	Fixed
`libodbc1` TuxCare:Ubuntu:16.04	before 2.3.1-4.1+tuxcare.els1	2.3.1-4.1+tuxcare.els1
`odbcinst` TuxCare:Ubuntu:16.04	before 2.3.1-4.1+tuxcare.els1	2.3.1-4.1+tuxcare.els1
`odbcinst1debian2` TuxCare:Ubuntu:16.04	before 2.3.1-4.1+tuxcare.els1	2.3.1-4.1+tuxcare.els1
`unixodbc` TuxCare:Ubuntu:16.04	before 2.3.1-4.1+tuxcare.els1	2.3.1-4.1+tuxcare.els1
`unixodbc-dev` TuxCare:Ubuntu:16.04	before 2.3.1-4.1+tuxcare.els1	2.3.1-4.1+tuxcare.els1
`unixodbc` Debian:12	before 2.3.6-0.1	2.3.6-0.1
`unixodbc` Debian:13	before 2.3.6-0.1	2.3.6-0.1
`unixodbc` Debian:14	before 2.3.6-0.1	2.3.6-0.1
`unixODBC` Mageia:6 From an advisory covering 2 CVEs	before 2.3.7-1.mga6	2.3.7-1.mga6
`unixODBC` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7

Show 25 moreShow less

Affected packages
Package	Affected	Fixed
`unixODBC-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC-devel` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC-devel` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:2.3.1-14.el7	0:2.3.1-14.el7
`unixODBC` Red Hat:rhel_eus:7.6::computenode From an advisory covering 2 CVEs	before 0:2.3.1-14.el7_6	0:2.3.1-14.el7_6
`unixODBC-debuginfo` Red Hat:rhel_eus:7.6::computenode From an advisory covering 2 CVEs	before 0:2.3.1-14.el7_6	0:2.3.1-14.el7_6
`unixODBC-devel` Red Hat:rhel_eus:7.6::computenode From an advisory covering 2 CVEs	before 0:2.3.1-14.el7_6	0:2.3.1-14.el7_6
`unixODBC` Red Hat:rhel_eus:7.6::server From an advisory covering 2 CVEs	before 0:2.3.1-14.el7_6	0:2.3.1-14.el7_6
`unixODBC-debuginfo` Red Hat:rhel_eus:7.6::server From an advisory covering 2 CVEs	before 0:2.3.1-14.el7_6	0:2.3.1-14.el7_6
`unixODBC-devel` Red Hat:rhel_eus:7.6::server From an advisory covering 2 CVEs	before 0:2.3.1-14.el7_6	0:2.3.1-14.el7_6
`unixODBC` SUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 2 CVEs	before 2.3.6-7.9.1	2.3.6-7.9.1
`unixODBC` SUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 2 CVEs	before 2.3.6-7.9.1	2.3.6-7.9.1
`unixODBC` SUSE:Linux Enterprise Server 12 SP3 From an advisory covering 2 CVEs	before 2.3.6-7.9.1	2.3.6-7.9.1
`unixODBC` SUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs	before 2.3.6-7.9.1	2.3.6-7.9.1
`unixodbc` Ubuntu:Pro:14.04:LTS	before 2.2.14p2-5ubuntu5+esm1, plus listed versions 2.2.14p2-5ubuntu42.2.14p2-5ubuntu5	2.2.14p2-5ubuntu5+esm1
`unixodbc` Ubuntu:Pro:16.04:LTS	before 2.3.1-4.1ubuntu0.1~esm1, plus listed versions 2.3.1-32.3.1-42.3.1-4.1	2.3.1-4.1ubuntu0.1~esm1
`unixodbc` Ubuntu:18.04:LTS	before 2.3.4-1.1ubuntu3, plus listed versions 2.3.4-12.3.4-1.12.3.4-1.1ubuntu2	2.3.4-1.1ubuntu3
`unixODBC` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 2.3.9-3.4	2.3.9-3.4

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-7409 is a critical vulnerability (CVSS 9.8) in Unixodbc, published February 22, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.54%, the 85th percentile. Fixed in libodbc1 2.3.1-4.1+tuxcare.els1.

References

Show 25 moreShow less