Amazon Athena Odbc Driver
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Amazon Athena Odbc Driver.
Recent Amazon Athena Odbc Driver Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 2026-04-14 | Issues with Amazon Athena ODBC Driver | April 14, 2026 |
By the Year
In 2026 there have been 6 vulnerabilities in Amazon Athena Odbc Driver with an average score of 7.4 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 6 | 7.40 |
It may take a day or so for new Amazon Athena Odbc Driver vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Amazon Athena Odbc Driver Security Vulnerabilities
Improper neutralization in Amazon Athena ODBC driver auth pre-2.1.0
CVE-2026-35558
7.8 - High
- April 03, 2026
Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authentication flows by using specially crafted connection parameters that are processed by the driver during user-initiated authentication. To remediate this issue, users should upgrade to version 2.1.0.0.
Command Injection
Amazon Athena ODBC Driver <2.1.0.0: OOB Write in Query Processor
CVE-2026-35559
6.5 - Medium
- April 03, 2026
Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during query operations. To remediate this issue, users should upgrade to version 2.1.0.0.
Memory Corruption
OS Command Injection in Amazon Athena ODBC Driver < 2.0.5.1 (Linux)
CVE-2026-5485
7.8 - High
- April 03, 2026
OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameters that are loaded by the driver during a local user-initiated connection. To remediate this issue, users should upgrade to version 2.0.5.1 or later.
Shell injection
Resource Exhaustion in Athena ODBC Driver (pre2.1.0.0)
CVE-2026-35562
7.5 - High
- April 03, 2026
Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive resource consumption during the driver's parsing operations. To remediate this issue, users should upgrade to version 2.1.0.0.
Allocation of Resources Without Limits or Throttling
Amazon Athena ODBC Driver <2.1.0.0: Brows Auth Hijack
CVE-2026-35561
7.4 - High
- April 03, 2026
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows. To remediate this issue, users should upgrade to version 2.1.0.0.
AuthZ
Amazon Athena ODBC Driver <2.1.0 Improper Cert Validation (MITM)
CVE-2026-35560
7.4 - High
- April 03, 2026
Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to intercept authentication credentials due to insufficient default transport security when connecting to identity providers. This only applies to connections with external identity providers and does not apply to connections with Athena. To remediate this issue, users should upgrade to version 2.1.0.0.
Improper Certificate Validation
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Amazon Athena Odbc Driver or by Amazon? Click the Watch button to subscribe.
