Summary
It was discovered that Firebird exposed certain UDF libraries. An
authenticated attacker could use this vulnerability to cause a denial of service
(crash) or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | firebird2.5 | 2.5.4.26856.ds4-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticat…
References
-
report
https://ubuntu.com/security/CVE-2017-6369