CVE-2011-1145: Debian Linux

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Opensuse Opensuse: version 11.3 only; version 11.4 only
• Red Hat Enterprise Linux: version 4.0 only; version 5.0 only; version 6.0 only
• Unixodbc Unixodbc: up to and including 2.2.14

Published 2019-11-14. Last modified 2026-06-16.