Buffer Overflow in psqlODBC via Large-Object Read

Executive Summary

This vulnerability exists in psqlODBC versions before 18.00.0006. It involves a buffer overflow during large-object reads where the client copies server-supplied data into a fixed-size buffer without checking the data length. A malicious server or man-in-the-middle can exploit this to overwrite adjacent memory with arbitrary bytes by sending oversized responses.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by checking the version of psqlODBC installed on your system. If the version is earlier than 18.00.0006, the system is vulnerable. Use commands like 'psqlodbc --version' or check package managers (e.g., 'rpm -qa | grep psqlodbc' or 'dpkg -l | grep psqlodbc') to verify the installed version.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to execute arbitrary code on your system, crash the psqlODBC client, or steal sensitive data. Since fetching large-object columns triggers the flaw, any interaction with a compromised server could lead to compromise. The impact depends on the privileges of the psqlODBC process.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade psqlODBC to version 18.00.0006 or later. Ensure SSL settings are properly configured to trust the server. Avoid fetching large-object columns from untrusted sources until the update is applied.

Useful 0 Not Useful 0