Amazon Athena ODBC Driver Out-of-Bounds Write Vulnerability Allowing Denial-of-Service
Vulnerability
A denial-of-service vulnerability has been identified in the Amazon Athena ODBC driver, specifically in versions prior to 2.1.0.0. The issue arises from an out-of-bounds write in the query processing components, which could allow a threat actor to crash the driver. This vulnerability can be exploited by using specially crafted data that the driver processes during query operations.
Impact
Exploitation of this vulnerability can lead to a crash of the ODBC driver, causing disruption in applications that rely on it.
Remediation
Users are advised to upgrade to the Amazon Athena ODBC driver version 2.1.0.0, available through the Amazon Athena ODBC 2.x driver download page. Instructions for downloading the driver on Windows, Linux, and macOS are also available on this page.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.