Skip to content
OpenAdvisories
Medium WID-SEC-2025-1857 2 CVEs

Firebird: Mehrere Schwachstellen

Published Aug 17, 2025 · Updated Aug 31, 2025 · Revision 5 · de-DE

Vendor: Debian Vendor: Firebird Foundation Vendor: SUSE Product: Firebird Product: Linux Product: Linux Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Firebird ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Angriff durchzuführen.

Product

Firebird ist ein relationales Open-Source-Datenbankmanagementsystem.

Vulnerabilities 2

  • High 7.1
    CVE-2025-24975

    Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External

    Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnerable if ExtConnPoolSize is not set equal to 0. If connections stored in ExtConnPool are not verified for presence and suitability of the Cry…

    FirebirdSQL firebird firebird3.0 firebird4.0 Debian Ubuntu
  • Medium 5.3
    CVE-2025-54989

    Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability

    Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL pointer dereference denial-of-service vulnerability in Firebird. This specific flaw exists within the parsing of xdr message from client. It le…

    FirebirdSQL firebird firebird3.0 firebird3.0 Debian Ubuntu

Revision history

  1. #5

    Neue Updates von Debian aufgenommen

  2. #4

    Neue Updates von SUSE aufgenommen

  3. #3

    Neue Updates von Debian aufgenommen

  4. #2

    Referenz(en) aufgenommen: ZDI-25-859

  5. #1

    Initiale Fassung

References