Amazon Athena Odbc Driver
Approved changes feed: RSS · Atom
cpe:2.3:a:amazon:amazon_athena_odbc_driver:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Amazon (0ed129a9-8e26-53dc-aefe-55957e638c30) |
|---|---|
| Product | Amazon Athena Odbc Driver (e23bcf23-3208-55c5-8e64-f18e1ada0ced) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5485 |
not_vulnerable | 2026-06-08 08:07:03.757846 | db.gcve.eu details are currently unavailable. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35562 |
not_vulnerable | 2026-06-08 07:59:14.141851 |
Allocation of resources without limits in parsing components in Amazon Athena ODBC driver
HIGH (7.5)
Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive resource consumption during the driver's parsing operations.
To remediate this issue, users should upgrade to version 2.1.0.0.
Published: 2026-04-03T20:10:51.206Z
Updated: 2026-04-06T15:03:06.176Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35561 |
not_vulnerable | 2026-06-08 07:59:14.141207 |
Insufficient authentication security controls in browser-based authentication components in Amazon Athena ODBC driver
HIGH (7.4)
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows.
To remediate this issue, users should upgrade to version 2.1.0.0.
Published: 2026-04-03T20:10:40.591Z
Updated: 2026-04-07T13:09:01.619Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35560 |
not_vulnerable | 2026-06-08 07:59:14.140572 |
Improper certificate validation in identity provider connection components in Amazon Athena ODBC driver
HIGH (7.4)
Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to intercept authentication credentials due to insufficient default transport security when connecting to identity providers. This only applies to connections with external identity providers and does not apply to connections with Athena.
To remediate this issue, users should upgrade to version 2.1.0.0.
Published: 2026-04-03T20:10:38.830Z
Updated: 2026-04-07T13:09:13.079Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35559 |
not_vulnerable | 2026-06-08 07:59:14.139828 |
Out-of-bounds write in query processing components in Amazon Athena ODBC driver
MEDIUM (6.5)
Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during query operations.
To remediate this issue, users should upgrade to version 2.1.0.0.
Published: 2026-04-03T20:13:29.590Z
Updated: 2026-04-07T14:25:39.392Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35558 |
not_vulnerable | 2026-06-08 07:59:14.134187 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.