CVE-2025-65104
Fixed in a distro release EPSS <1%CVSS 7.9
Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.
Products: firebirdsql firebird
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | firebird3.0 | no fix |
| Debian 13 | firebird3.0 | no fix |
| Debian 14 | firebird3.0 | 3.0.14.ds7-1 |
| Ubuntu 18.04 LTS | firebird3.0 | no fix |
| Ubuntu 20.04 LTS | firebird3.0 | no fix |
| Ubuntu 22.04 LTS | firebird3.0 | no fix |
| Ubuntu 24.04 LTS | firebird3.0 | no fix |
| Ubuntu 25.10 | firebird3.0 | no fix |
| Ubuntu 25.10 | firebird4.0 | no fix |
| Ubuntu 26.04 LTS | firebird3.0 | no fix |
| Ubuntu 26.04 LTS | firebird4.0 | no fix |
| Ubuntu 26.10 | firebird3.0 | no fix |
| Ubuntu 26.10 | firebird4.0 | no fix |