Skip to content
OpenAdvisories
High DSA-5992-1 2 CVEs

firebird4.0 - security update

Published Aug 30, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 13 firebird4.0 4.0.5.3140.ds6-17+deb13u1

Vulnerabilities 2

  • High 7.1
    CVE-2025-24975

    Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External

    Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnerable if ExtConnPoolSize is not set equal to 0. If connections stored in ExtConnPool are not verified for presence and suitability of the Cry…

    FirebirdSQL firebird firebird3.0 firebird4.0 Debian Ubuntu
  • Medium 5.3
    CVE-2025-54989

    Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability

    Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL pointer dereference denial-of-service vulnerability in Firebird. This specific flaw exists within the parsing of xdr message from client. It le…

    FirebirdSQL firebird firebird3.0 firebird3.0 Debian Ubuntu