CVE-2017-6369
Fixed in a distro release EPSS 3%
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so.
Products: firebirdsql firebird
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | firebird3.0 | 3.0.1.32609.ds4-14 |
| Debian 13 | firebird3.0 | 3.0.1.32609.ds4-14 |
| Debian 14 | firebird3.0 | 3.0.1.32609.ds4-14 |
| Debian 7 | firebird2.5 | 2.5.2.26540.ds4-1~deb7u3 |
| Debian 8 | firebird2.5 | 2.5.3.26778.ds4-5+deb8u1 |
| SUSE Linux Enterprise Desktop 12 SP1 | firebird-classic | 2.5.2.26539-15.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | firebird-classic | 2.5.2.26539-15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | firebird | 2.5.2.26539-15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | firebird-classic | 2.5.2.26539-15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | firebird-classic | 2.5.2.26539-15.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | firebird-classic | 2.5.2.26539-15.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP2 | firebird-classic | 2.5.2.26539-15.1 |
| Ubuntu 14.04 LTS | firebird2.5 | 2.5.2.26540.ds4-9ubuntu1.1 |
| Ubuntu Pro 16.04 LTS | firebird2.5 | 2.5.4.26856.ds4-1ubuntu0.1~esm1 |