Описание
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| firebird2.5 | fixed | 2.5.3.26778.ds4-5 | package | |
| firebird2.1 | removed | package |
Примечания
http://sourceforge.net/p/firebird/code/60331
http://tracker.firebirdsql.org/browse/CORE-4630
EPSS
Связанные уязвимости
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.
Уязвимость системы управления базами данных Firebird, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2017-2493: package `firebird` update to version 3.0.2.32703.0-alt1
EPSS