Re: CVE-2024-21262

[Jarod Burris]

Thank you for the confirmation. If you have any method of influence - if they would include the 32-bit driver version in the ("Supported Versions Affected") column it would relieve our need to ask this type of question. The tools used for scanning take the face value of what is published and scan against it - as the 32-bit driver isn't referenced we need to jump through hoops (such as this) to get sufficient documentation to identify alert validity.

https://www.oracle.com/security-alerts/cpuoct2024.html
CVE-2024-21262 - lists ("Supported Versions Affected") as ("9.0.0 and prior") which the scanner sees ("8.0.x") as a non-patched release... while other lines do reference the 32-bit release it doesn't seem to be applied for the ODBC driver.