Launchpad.net

CVE 2018-7409

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

CVE-2018-7409 (Candidate) is related to these bugs:

Bug #1746195: Upgrade unixODBC to version 2.3.5

Summary				In	Importance	Status
	1746195	Upgrade unixODBC to version 2.3.5		unixodbc (Ubuntu)	High	Fix Released
	1746195	Upgrade unixODBC to version 2.3.5		unixODBC	Unknown	Fix Released

See the

CVE page on Mitre.org for more details.