Advisories · Technology
firebird.
Every CVE that names firebird among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution
- firebird
- Path traversal
- Code injection
- CVSS 7.5 High
Firebird: DoS via malicious slice descriptor in slice packet
- firebird
- Denial of service
- CVSS 7.5 High
Firebird: DoS via `op_response` packet from client
- firebird
- CWE-228
- CVSS 7.5 High
Firebird has a buffer overflow when parsing corrupted slice packets
- firebird
- Memory corruption
- Insecure deserialization
- CVSS 8.2 High
Firebird Null Pointer Dereference via CryptCallback causes DOS
- firebird
- Memory corruption
- CVSS 6.0 Medium
Firebird server hangs when using specific clumplet on batch creation
- firebird
- Memory corruption
- Denial of service
- CVSS 8.2 High
Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments
- firebird
- Memory corruption
- CVSS 7.5 High
Firebird has potential server crash via null pointer dereference when processing op_slice packet
- firebird
- Memory corruption
- CVSS 7.9 High
Firebird: Information leak vulnerability in firebird3 client when used with newer server
- firebird
- Information disclosure
- CVSS 7.1 High
Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
- firebird
- CWE-754
- CVSS 5.3 Medium
Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability
- firebird
- Memory corruption
- CVSS 7.5 High
Server crash when using specific form of SET BIND statement
- firebird
- Denial of service