CVE-2014-9323
Fixed in a distro release EPSS 3%
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.
Products: firebirdsql firebird, opensuse evergreen, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | firebird2.1 | 2.1.3.18185-0.ds1-11+squeeze2 |
| Debian 6.0 | firebird2.5 | 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2 |
| Debian 7 | firebird2.5 | 2.5.2.26540.ds4-1~deb7u2 |
| Ubuntu 14.04 LTS | firebird2.5 | 2.5.2.26540.ds4-9ubuntu1.1 |