Search CVE reports
1 – 7 of 7 results
Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash when a user uses a specific form of SET BIND statement. Any non-privileged user with minimum access to a server...
3 affected packages
firebird2.5, firebird3.0, relational
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| firebird2.5 | Not in release | Not in release | Not in release | Not in release | — |
| firebird3.0 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| relational | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement.
2 affected packages
firebird2.5, firebird3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| firebird2.5 | — | — | — | — | Not in release |
| firebird3.0 | — | — | — | — | Ignored |
Some fixes available 2 of 6
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so.
2 affected packages
firebird2.5, firebird3.0
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| firebird2.5 | — | — | Not in release | Not in release | Not in release |
| firebird3.0 | — | — | Not affected | Not affected | Not affected |
FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter.
1 affected package
firebird2.5
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| firebird2.5 | — | — | — | — | Not in release |
Some fixes available 1 of 6
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a...
3 affected packages
firebird2.0, firebird2.1, firebird2.5
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| firebird2.0 | — | — | — | — | Not in release |
| firebird2.1 | — | — | — | — | Not in release |
| firebird2.5 | — | — | — | — | Not in release |
Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to...
2 affected packages
firebird2.1, firebird2.5
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| firebird2.1 | — | — | — | — | — |
| firebird2.5 | — | — | — | — | — |
TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing an empty dynamic SQL query.
1 affected package
firebird2.5
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| firebird2.5 | — | — | — | — | — |