Forum Discussion

Mat91's avatar
Mat91
New Member
1 year ago

ODBC Simba Drivers CVE-2024-5535

Several Power BI ODBC Simba drivers seem to be vulnerable to CVE-2024-5535.   Path to the vulnerable component:  C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba * ODBC Driver\li...
Need Help
Mat91's avatar
Mat91
New Member
1 year ago

Hello Ritaf1983.

Thank you very much for your message.

 

I have just checked the versions of SSL used in Power BI Desktop version 2.138.1203.0, which is the latest available for download from the Microsoft website.

Here's what I've found:

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba Amazon Redshift ODBC Driver\OpenSSL64.DllA\libssl-3-x64.dll
3.0.13

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba DocumentDB ODBC Driver\LibCurl64.DllA\OpenSSL64.DllA\libssl-3-x64.dll
3.0.13

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba DocumentDB ODBC Driver\OpenSSL64.DllA\libssl-3-x64.dll
3.0.13

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba Google BigQuery ODBC Driver\LibCurl64.DllA\OpenSSL64.DllA\libssl-3-x64.dll
3.0.13

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba Google BigQuery ODBC Driver\OpenSSL64.DllA\libssl-3-x64.dll
3.0.13

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba Hive ODBC Driver\OpenSSL64.DllA\libssl-3-x64.dll
3.0.13

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba Impala ODBC Driver\LibCurl64.DllA\OpenSSL64.DllA\libssl-3-x64.dll
3.0.13

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba Impala ODBC Driver\OpenSSL64.DllA\libssl-3-x64.dll
3.0.13

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba Netezza ODBC Driver\libssl-3-x64.dll
3.0.13
C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba QuickBooks ODBC Driver\LibCurl64.DllA\OpenSSL64.DllA\libssl-3-x64.dll
3.0.13

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba QuickBooks ODBC Driver\OpenSSL64.DllA\libssl-3-x64.dll
3.0.13

C:\Program Files\Microsoft Power BI Desktop\bin\ODBC Drivers\Simba Trino ODBC Driver\OpenSSL64.DllA\libssl-3-x64.dll
3.0.8

 

Not a single instance of SSL has been updated. I have been checking every release and I get the same result every time. All versions are older than 3.0.15.

I am not using Power BI myself, I am rather managing a few workstations. I cannot prevent Power BI users to use features either.

Could you please suggest the best way to reach out to Simba about this?