{"id":"CVE-2024-1013","aliases":["AZL-36896","AZL-36904","BIT-unixodbc-2024-1013","CLSA-2024-1712261674","CLSA-2024-1712262573","CLSA-2024-1712263690","CLSA-2024-1712490771","CLSA-2024-1712837462","CLSA-2024-1714462946","CLSA-2025-1761844758","DEBIAN-CVE-2024-1013","EUVD-2024-16790","GHSA-x6h9-cx79-jjjv","MGASA-2024-0106","OESA-2024-1327","OESA-2024-1370","OESA-2024-1371","OESA-2024-1372","OESA-2024-1373","OESA-2024-1374","OESA-2024-2332","ROOT-OS-DEBIAN-12-CVE-2024-1013","SUSE-SU-2024:2978-1","UBUNTU-CVE-2024-1013","USN-6715-1","USN-6715-2"],"status":"published","title":"Unixodbc: out of bounds stack write due to pointer-to-integer types conversion","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00284,"percentile":0.21044,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-823"],"published":"2024-03-18T10:53:02Z","modified":"2026-11-05T11:39:54Z","fixes":[{"ecosystem":"Azure Linux:2","package":"unixODBC","fixed_in":["2.3.9-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"unixODBC","fixed_in":["2.3.12-2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"unixODBC","fixed_in":["2.3.7-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"unixODBC-devel","fixed_in":["2.3.7-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"unixODBC","fixed_in":["2.2.14-14.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"unixODBC-devel","fixed_in":["2.2.14-14.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"unixODBC-kde","fixed_in":["2.2.14-14.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"unixODBC","fixed_in":["2.2.14-14.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"unixODBC-devel","fixed_in":["2.2.14-14.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"unixODBC-kde","fixed_in":["2.2.14-14.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"unixODBC","fixed_in":["2.3.7-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"unixODBC-devel","fixed_in":["2.3.7-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libodbc1","fixed_in":["2.3.1-4.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"odbcinst","fixed_in":["2.3.1-4.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"odbcinst1debian2","fixed_in":["2.3.1-4.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"unixodbc","fixed_in":["2.3.1-4.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"unixodbc-dev","fixed_in":["2.3.1-4.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libodbc1","fixed_in":["2.3.4-1.1ubuntu3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"odbcinst","fixed_in":["2.3.4-1.1ubuntu3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"odbcinst1debian2","fixed_in":["2.3.4-1.1ubuntu3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"unixodbc","fixed_in":["2.3.4-1.1ubuntu3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"unixodbc-dev","fixed_in":["2.3.4-1.1ubuntu3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libodbc1","fixed_in":["2.3.6-0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"odbcinst","fixed_in":["2.3.6-0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"odbcinst1debian2","fixed_in":["2.3.6-0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"unixodbc","fixed_in":["2.3.6-0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"unixodbc-dev","fixed_in":["2.3.6-0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"unixodbc","fixed_in":["2.3.14-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"unixODBC","fixed_in":["2.3.11-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"unixODBC","fixed_in":["2.3.7-3.h1.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"unixODBC","fixed_in":["2.3.7-3.h1.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"unixODBC","fixed_in":["2.3.7-3.h1.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"unixODBC","fixed_in":["2.3.7-3.h1.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"unixODBC","fixed_in":["2.3.7-3.h1.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"unixODBC","fixed_in":["2.3.7-3.h1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"unixODBC","fixed_in":["2.3.9-4.oe2403"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"unixodbc","fixed_in":["2.3.11-2+deb12u1.root.io.1","2.3.11-2+deb12u1.aikido.2"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-unixodbc","fixed_in":["2.3.11-2+deb12u1.root.io.1","2.3.11-2+deb12u1.aikido.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"unixODBC","fixed_in":["2.3.9-7.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"unixODBC","fixed_in":["2.3.9-7.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"unixODBC","fixed_in":["2.3.9-7.16.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"unixodbc","fixed_in":["2.3.1-4.1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"unixodbc","fixed_in":["2.3.4-1.1ubuntu3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"unixodbc","fixed_in":["2.3.6-0.1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"unixodbc","fixed_in":["2.3.9-5ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"unixodbc","fixed_in":["2.3.12-1ubuntu0.24.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.9-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.12-2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"unixodbc"},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"unixODBC-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.14-14.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"unixODBC-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.14-14.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"unixODBC-kde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.14-14.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.14-14.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"unixODBC-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.14-14.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"unixODBC-kde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.14-14.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"unixODBC-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libodbc1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-4.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"odbcinst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-4.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"odbcinst1debian2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-4.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-4.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"unixodbc-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-4.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libodbc1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.1ubuntu3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"odbcinst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.1ubuntu3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"odbcinst1debian2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.1ubuntu3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.1ubuntu3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"unixodbc-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.1ubuntu3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libodbc1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"odbcinst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"odbcinst1debian2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"unixodbc-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.11-2","2.3.11-2+deb12u1","2.3.11-3","2.3.11-4","2.3.12-1","2.3.12-2","2.3.14-1","2.3.14-2"]},{"source":"osv","ecosystem":"Debian:13","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.12-2","2.3.12-2+deb13u1","2.3.14-1","2.3.14-2"]},{"source":"osv","ecosystem":"Debian:14","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.14-1"}]}],"versions":["2.3.12-2"]},{"source":"osv","ecosystem":"Mageia:9","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.11-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-3.h1.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-3.h1.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-3.h1.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-3.h1.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-3.h1.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-3.h1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.9-4.oe2403"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.11-2+deb12u1.root.io.1"},{"fixed":"2.3.11-2+deb12u1.aikido.2"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.11-2+deb12u1.root.io.1"},{"fixed":"2.3.11-2+deb12u1.aikido.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.9-7.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.9-7.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"unixODBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.9-7.16.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.14p2-5ubuntu4","2.2.14p2-5ubuntu5","2.2.14p2-5ubuntu5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-4.1ubuntu0.1~esm2"}]}],"versions":["2.3.1-3","2.3.1-4","2.3.1-4.1","2.3.1-4.1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.1ubuntu3+esm1"}]}],"versions":["2.3.4-1","2.3.4-1.1","2.3.4-1.1ubuntu2","2.3.4-1.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-0.1ubuntu0.1"}]}],"versions":["2.3.6-0.1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.9-5ubuntu0.1"}]}],"versions":["2.3.6-0.1build2","2.3.9-2","2.3.9-3","2.3.9-4","2.3.9-5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.12-1ubuntu0.24.04.1"}]}],"versions":["2.3.12-1","2.3.12-1build1","2.3.12-1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-4.1ubuntu0.1~esm2"}]}],"versions":["2.3.1-3","2.3.1-4","2.3.1-4.1","2.3.1-4.1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.1ubuntu3+esm1"}]}],"versions":["2.3.4-1","2.3.4-1.1","2.3.4-1.1ubuntu2","2.3.4-1.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-0.1ubuntu0.1"}]}],"versions":["2.3.6-0.1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.9-5ubuntu0.1"}]}],"versions":["2.3.6-0.1build2","2.3.9-2","2.3.9-3","2.3.9-4","2.3.9-5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"unixodbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.12-1ubuntu0.24.04.1"}]}],"versions":["2.3.12-1","2.3.12-1build1","2.3.12-1build2"]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"unixodbc","product":"unixodbc"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2024-1013","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Broken Link","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260823","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","web","report"]},{"url":"https://github.com/lurcher/unixODBC/pull/157","tags":["x_transferred","Issue Tracking","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1013","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-x6h9-cx79-jjjv"},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1712261674.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1712262573.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2024-1712263690.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1712490771.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1712837462.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1714462946.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761844758.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-1013","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0106.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33031","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6715-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1327","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1370","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1371","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1372","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1373","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1374","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2332","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242978-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1228143","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1013","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-1013","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1013","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6715-2","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-1013","title":"Unixodbc: out of bounds stack write due to pointer-to-integer types conversion","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","status":"published","published":"2024-03-18T10:53:02.506Z","modified":"2026-11-05T11:39:54.268Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-823"],"updated_at":"2026-11-05T13:18:22.408512Z"}],"euvd":[{"id":"EUVD-2024-16790","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","status":"published","published":"2024-03-18T10:53:02Z","modified":"2026-11-05T11:39:54Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T13:14:14.11293Z"}],"ghsa":[{"id":"GHSA-x6h9-cx79-jjjv","title":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller...","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","status":"published","published":"2024-03-18T12:30:35Z","modified":"2024-03-18T12:31:53Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"cwes":["CWE-823"],"updated_at":"2026-11-02T14:55:40.468141Z"}],"nvd":[{"id":"CVE-2024-1013","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","status":"published","published":"2024-03-18T11:15:09.227Z","modified":"2026-11-05T12:17:46.28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-823"],"updated_at":"2026-11-05T16:36:40.983114Z"}],"osv":[{"id":"AZL-36896","title":"CVE-2024-1013 affecting package unixODBC for versions less than 2.3.9-3","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","status":"published","published":"2024-03-18T11:15:09Z","modified":"2026-04-21T04:25:16.893472Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-36904","title":"CVE-2024-1013 affecting package unixODBC for versions less than 2.3.12-2","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","status":"published","published":"2024-03-18T11:15:09Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"CVE-2024-1013","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","status":"published","published":"2024-03-18T11:15:09.227Z","modified":"2026-04-16T04:32:05.104343698Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:37.180532Z"},{"id":"DEBIAN-CVE-2024-1013","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","status":"published","published":"2024-03-18T11:15:09.227Z","modified":"2026-11-02T12:00:35.862208199Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2024-1327","title":"unixODBC security update","description":"The unixODBC Project goals are to develop and promote unixODBC to be the definitive standard for ODBC on non MS Windows platforms. This is to include GUI support for both KDE and GNOME.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.(CVE-2024-1013)","status":"published","published":"2024-03-29T11:06:46Z","modified":"2026-08-18T01:18:19.920201163Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1370","title":"unixODBC security update","description":"The unixODBC Project goals are to develop and promote unixODBC to be the definitive standard for ODBC on non MS Windows platforms. This is to include GUI support for both KDE and GNOME.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.(CVE-2024-1013)","status":"published","published":"2024-04-12T11:06:49Z","modified":"2026-08-18T01:18:20.116758712Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1371","title":"unixODBC security update","description":"The unixODBC Project goals are to develop and promote unixODBC to be the definitive standard for ODBC on non MS Windows platforms. This is to include GUI support for both KDE and GNOME.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.(CVE-2024-1013)","status":"published","published":"2024-04-12T11:06:49Z","modified":"2026-08-18T01:18:20.158112325Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1372","title":"unixODBC security update","description":"The unixODBC Project goals are to develop and promote unixODBC to be the definitive standard for ODBC on non MS Windows platforms. This is to include GUI support for both KDE and GNOME.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.(CVE-2024-1013)","status":"published","published":"2024-04-12T11:06:49Z","modified":"2026-08-18T01:18:20.11689617Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1373","title":"unixODBC security update","description":"The unixODBC Project goals are to develop and promote unixODBC to be the definitive standard for ODBC on non MS Windows platforms. This is to include GUI support for both KDE and GNOME.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.(CVE-2024-1013)","status":"published","published":"2024-04-12T11:06:49Z","modified":"2026-08-18T01:18:20.150036352Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1374","title":"unixODBC security update","description":"The unixODBC Project goals are to develop and promote unixODBC to be the definitive standard for ODBC on non MS Windows platforms. This is to include GUI support for both KDE and GNOME.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.(CVE-2024-1013)","status":"published","published":"2024-04-12T11:06:49Z","modified":"2026-08-18T01:18:20.139956614Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-2332","title":"unixODBC security update","description":"The unixODBC Project goals are to develop and promote unixODBC to be the definitive standard for ODBC on non MS Windows platforms. This is to include GUI support for both KDE and GNOME.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.(CVE-2024-1013)","status":"published","published":"2024-11-01T11:07:48Z","modified":"2026-08-18T01:17:37.301584512Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"UBUNTU-CVE-2024-1013","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","status":"published","published":"2024-03-18T11:15:00Z","modified":"2026-04-22T14:36:46.471851Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"BIT-unixodbc-2024-1013","description":"An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.","status":"published","published":"2025-03-25T07:44:21.848Z","modified":"2025-03-25T08:33:32.491398Z","updated_at":"2026-11-02T15:28:36.104787Z"},{"id":"CLSA-2024-1712261674","title":"unixODBC: Fix of CVE-2024-1013","description":"- CVE-2024-1013: Fix out-of-bounds stack write by adjusting byte size in callee\n  function","status":"published","published":"2024-04-07T11:39:01Z","modified":"2026-06-01T00:31:54.961994953Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1712262573","title":"unixODBC: Fix of CVE-2024-1013","description":"- CVE-2024-1013: Fix out-of-bounds stack write issue by adjusting callee write\n  size from 8 to 4 bytes","status":"published","published":"2024-04-04T20:29:35Z","modified":"2026-06-01T00:33:16.119154962Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1712263690","title":"unixODBC: Fix of CVE-2024-1013","description":"- CVE-2024-1013: Fix out-of-bounds stack write issue by adjusting callee write\n  size from 8 to 4 bytes","status":"published","published":"2024-04-04T20:48:13Z","modified":"2026-06-01T00:33:25.224827614Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1712490771","title":"unixODBC: Fix of CVE-2024-1013","description":"- CVE-2024-1013: Fix out-of-bounds stack write by adjusting byte size in callee\n  function","status":"published","published":"2024-04-07T11:52:54Z","modified":"2026-06-01T00:33:22.533767442Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1712837462","title":"Fix CVE(s): CVE-2024-1013","description":"   * SECURITY UPDATE: Fix incompatible pointer-to-integer types\n     - debian/patch/CVE-2024-1013.patch: PostgreSQL driver: Fix incompatible\n     pointer-to-integer types. This change is required to avoid a build\n     failure with GCC 14.\n     - CVE-2024-1013","status":"published","published":"2024-04-11T12:11:05Z","modified":"2026-06-04T10:03:22.043544Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1714462946","title":"Fix CVE(s): CVE-2024-1013","description":"   * SECURITY UPDATE: PostgreSQL driver: Fix incompatible pointer-to-integer types\n     - debian/patches/CVE-2024-1013.patch: Fix out-of-bounds stack write by adjusting\n       byte size in callee function\n     - CVE-2024-1013","status":"published","published":"2024-04-30T07:42:29Z","modified":"2026-06-04T10:03:22.890917Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2025-1761844758","title":"Fix CVE(s): CVE-2024-1013","description":"   * SECURITY UPDATE: out-of-bounds stack write flaw in 64-bit architectures\n     - debian/patches/CVE-2024-1013.patch: Fix incompatible pointer-to-integer\n       types causing out-of-bounds stack writes on 64-bit architectures\n     - CVE-2024-1013","status":"published","published":"2025-10-30T17:19:22Z","modified":"2026-06-04T10:03:19.195105Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"MGASA-2024-0106","title":"Updated unixODBC packages fix security vulnerability","description":"It was discovered that unixODBC incorrectly handled certain bytes.\nAn attacker could use this issue to execute arbitrary code or cause\na crash.\n","status":"published","published":"2024-04-01T19:50:27Z","modified":"2026-04-16T04:44:27.157942249Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2024-1013","title":"CVE-2024-1013 in unixodbc - Patched by Root","description":"Root has patched CVE-2024-1013 in the unixodbc package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-26T07:28:08Z","modified":"2026-08-26T09:00:12.224612108Z","updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"SUSE-SU-2024:2978-1","title":"Security update for unixODBC","description":"This update for unixODBC fixes the following issues:\n\n- CVE-2024-1013: Fixed out of bounds stack write due to pointer-to-integer types conversion on 64-bit architectures (bsc#1228143)\n","status":"published","published":"2024-08-20T09:07:09Z","modified":"2026-02-04T02:14:21.673927Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-6715-1","title":"unixodbc vulnerability","description":"It was discovered that unixODBC incorrectly handled certain bytes.\nAn attacker could use this issue to execute arbitrary code or cause\na crash.\n","status":"published","published":"2024-03-27T20:38:24Z","modified":"2026-06-25T13:32:28.831806129Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6715-2","title":"unixodbc vulnerability","description":"USN-6715-1 fixed a vulnerability in unixODBC. This update provides the\ncorresponding fix for Ubuntu 24.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that unixODBC incorrectly handled certain bytes.\n An attacker could use this issue to execute arbitrary code or cause\n a crash.\n","status":"published","published":"2024-06-05T13:17:14Z","modified":"2026-04-22T10:46:07.966442Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}