Threats tagged 'ghsa-5xmp-p3qm-7hxq'

A buffer overflow vulnerability exists in psqlODBC versions before 18.00.0006 when quoting schema or table names into a 128-byte stack buffer. The length check allows writing up to two bytes past the buffer end, causing stack corruption. This occurs with long schema or table names derived from the application's SQL text and during rewriting of SELECT @@IDENTITY statements. An application forwarding untrusted SQL text to the driver may expose itself to this vulnerability.