Critical
Security advisory
The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-7485
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:27 UTC · Revision 1
Source evidence
The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact.
osv:CVE-2018-7485
Complete source record
{
"id": "0d1b8209ca5b79a37f4288938cac7cf0cf49121d54ff0ded0f8156226997786f",
"url": "https://osv.dev/vulnerability/CVE-2018-7485",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-7485",
"summary": "The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact.",
"evidence": "osv:CVE-2018-7485",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2018-7485",
"aliases": [
"CVE-2018-7485"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/lurcher/unixodbc",
"type": "GIT",
"events": [
{
"introduced": "fce0b999118eb471822723c82515966046b25676"
},
{
"last_affected": "fce0b999118eb471822723c82515966046b25676"
},
{
"fixed": "45ef78e037f578b15fc58938a3a3251655e71d6f"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:unixodbc:unixodbc:2.3.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.3.5"
},
{
"last_affected": "2.3.5"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "45ef78e037f578b15fc58938a3a3251655e71d6f"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"2.3.5"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-7485.json",
"vanir_signatures": [
{
"id": "CVE-2018-7485-0116c673",
"digest": {
"threshold": 0.9,
"line_hashes": [
"194871485976564568222644147018375322529",
"312567024388020377303674224657788866569",
"58741678282498609914839137469146592184",
"209895836599252194242520718469085956174",
"326483403762743264162801175920691335243",
"168890070038278725565808719351188359857",
"125084256621417646051386122425565055328",
"125984365178799877983202624116070204082",
"92132637959238713266268352754292153879",
"306296870941242442268711629127234700614"
]
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "DriverManager/SQLSetDescFieldW.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-19f0387a",
"digest": {
"length": 1635,
"function_hash": "221076018990600298752231612385570872422"
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "odbcinst/SQLWriteFileDSN.c",
"function": "SQLWriteFileDSN"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-212ed892",
"digest": {
"length": 297,
"function_hash": "238544046005397600979991927817734991558"
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "odbcinst/SQLCreateDataSource.c",
"function": "_single_string_alloc_and_copy"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-3c7c5277",
"digest": {
"length": 373,
"function_hash": "57408896660651845829201121512772019330"
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "odbcinst/SQLCreateDataSource.c",
"function": "_multi_string_alloc_and_copy"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-5e452665",
"digest": {
"threshold": 0.9,
"line_hashes": [
"125978840017268019661405498929304996526",
"130669083775802491445520679967672518409",
"95081495488433232928438470821688840354",
"78255813772861821172530249409844349989"
]
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "odbcinst/SQLWriteFileDSN.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-618030e3",
"digest": {
"length": 310,
"function_hash": "185621171165862406585399902487544233849"
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "odbcinst/SQLCreateDataSource.c",
"function": "_single_string_alloc_and_expand"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-64139fb2",
"digest": {
"length": 2332,
"function_hash": "57694611605143552821001553328450893791"
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "exe/iusql.c",
"function": "ExecuteSQL"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-69968670",
"digest": {
"threshold": 0.9,
"line_hashes": [
"279550115446533684865211626208940972917",
"104454965380888258184927876949273661952",
"213462015308014849553462333152542319343",
"17709770620305686166818284381155690960",
"279550115446533684865211626208940972917",
"104454965380888258184927876949273661952",
"143312565989849313773924593936162855618",
"32293983432283445473372534407914028702",
"279550115446533684865211626208940972917",
"104454965380888258184927876949273661952",
"213462015308014849553462333152542319343",
"17709770620305686166818284381155690960",
"279550115446533684865211626208940972917",
"104454965380888258184927876949273661952",
"143312565989849313773924593936162855618",
"32293983432283445473372534407914028702"
]
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "odbcinst/SQLCreateDataSource.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-6f7c1138",
"digest": {
"threshold": 0.9,
"line_hashes": [
"16920515504138527376691221490549844046",
"265361416020442231806819742315250355203",
"27953130207036718978259237167033226313",
"303589925598142668754667590288795642673"
]
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "exe/iusql.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-80101cbb",
"digest": {
"threshold": 0.9,
"line_hashes": [
"194871485976564568222644147018375322529",
"312567024388020377303674224657788866569",
"58741678282498609914839137469146592184",
"209895836599252194242520718469085956174",
"326483403762743264162801175920691335243",
"168890070038278725565808719351188359857",
"125084256621417646051386122425565055328",
"125984365178799877983202624116070204082",
"92132637959238713266268352754292153879",
"306296870941242442268711629127234700614"
]
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "DriverManager/SQLSetDescField.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-afd78502",
"digest": {
"length": 383,
"function_hash": "23309584842023270580920713917630728259"
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "odbcinst/SQLCreateDataSource.c",
"function": "_multi_string_alloc_and_expand"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-c90955bf",
"digest": {
"length": 4846,
"function_hash": "116185973548757359693982793420048436103"
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "DriverManager/SQLSetDescField.c",
"function": "SQLSetDescField"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-cef8ed6c",
"digest": {
"length": 5785,
"function_hash": "9414074466139147391569923712408860203"
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "DriverManager/SQLSetDescFieldW.c",
"function": "SQLSetDescFieldW"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-7485-e2d13c2f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"322111850722312363252504691623787776831",
"323238464578941118727250322460627829589",
"237290684553146219010531614035793345490"
]
},
"source": "https://github.com/lurcher/unixodbc/commit/45ef78e037f578b15fc58938a3a3251655e71d6f",
"target": {
"file": "DriverManager/SQLGetDiagRecW.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:35:48Z"
}
}
],
"modified": "2026-10-20T13:35:48.592255778Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2019:2336",
"https://github.com/lurcher/unixODBC/commit/45ef78e037f578b15fc58938a3a3251655e71d6f#diff-d52750c7ba4e594410438569d8e2963aL24"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2018-7485",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387858,
"published_at": "2018-02-26T14:29:00.383+00:00"
}