CVE-2023-34364
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk73th percentile - higher than 73% of all known CVEs
Summary
A buffer overflow was discovered in Progress DataDirect Connect for ODBC before version 08.02.2770 for Oracle. An overly large value for certain options of a connection string may overrun the buffer allocated to process the string value.
Risk Assessment
An attacker can execute arbitrary code on an affected host, posing a significant security risk to the system.
Recommendation
It is recommended to update to the latest version of Progress DataDirect Connect for ODBC to mitigate this vulnerability.
Original NVD description (English source)
A buffer overflow was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. An overly large value for certain options of a connection string may overrun the buffer allocated to process the string value. This allows an attacker to execute code of their choice on an affected host by copying carefully selected data that will be executed as code.