Skip to content
CVE Tracker
Back

CVE-2012-2657

Buffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a denial of service…

Low2.1EPSS 0.44%
Published
Updated
Reserved
Assigned by
redhat

Description

Buffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a denial of service (crash) via a long string in the FILEDSN option. NOTE: this issue might not be a vulnerability, since the ability to set this option typically implies that the attacker already has legitimate access to cause a DoS or execute code, and therefore the issue would not cross privilege boundaries. There may be limited attack scenarios if isql command-line options are exposed to an attacker, although it seems likely that other, more serious issues would also be exposed, and this issue might not cross privilege boundaries in that context.

Scores

CVSS scores of CVE-2012-2657, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0Low2.1AV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS (exploitation in 30 days)
0.44% · top 62% of all CVEs (2 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.1.

Weakness

Affected products

  • n/a

    • affected n/a

References (8)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .