CVE-2014-9264 Memory corruption in n/a

What is CVE-2014-9264?

CVE-2014-9264 is a high-severity memory corruption vulnerability in n/a, published on 11 Dec 2014. It can be exploited over the network, with no action from the victim.

Official description

Stack-based buffer overflow in the .NET Data Provider in SAP SQL Anywhere allows remote attackers to execute arbitrary code via a crafted column alias.

Weakness: CWE-119

Which versions are affected by CVE-2014-9264?

It affects 1 product.

Products include Sap Sql Anywhere.

How do I fix CVE-2014-9264?

No fix has been published for CVE-2014-9264 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2014-9264 being exploited?

There is no known exploitation of CVE-2014-9264 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2023-33990 Denial of Service (DoS) vulnerability in SAP SQL Anywhere High 7.8
• CVE-2022-41259 Denial of service in SAP SQL Anywhere Medium 6.5
• CVE-2022-27670 Denial of service in SAP SQL Anywhere Server Medium 6.5
• CVE-2015-2819 Denial of service in n/a Medium 5.0
• CVE-2016-10310 Memory corruption in n/a Medium 4.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4qcv-5v8h-xc6f.