CVE-2018-7409

CRITICAL 9.8CVE-2018-7409 · Published 22/02/2018 · updated 17/06/2026

In short

CVE-2018-7409 is a CRITICAL (CVSS 9.8) vulnerability affecting unixodbc (unixodbc).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 85.1% of all vulnerabilities.
Fix: update to 2.3.5 or later.

Package	Affected versions	Patched versions
unixodbc unixodbc	`< 2.3.5`	`2.3.5`

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.