Skip to content
OpenAdvisories
High WID-SEC-2026-1171 8 CVEs

Firebird: Mehrere Schwachstellen

Published Apr 19, 2026 · Updated May 17, 2026 · Revision 2 · de-DE

Vendor: Firebird Foundation Vendor: SUSE Product: Firebird Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Firebird ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

Product

Firebird ist ein relationales Open-Source-Datenbankmanagementsystem.

Vulnerabilities 8

  • Critical 10.0
    CVE-2026-40342

    Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution

    Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the external engine plugin loader concatenates a user-supplied engine name into a filesystem path without filtering path separators or .. component…

    FirebirdSQL firebird firebird3.0 firebird3.0 Debian Ubuntu
  • High 8.2
    CVE-2026-28224

    Firebird Null Pointer Dereference via CryptCallback causes DOS

    Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when the server receives an op_crypt_key_callback packet without prior authentication, the port_server_crypt_callback handler is not initialized, r…

    FirebirdSQL firebird firebird3.0 firebird3.0 Debian Ubuntu
  • High 7.9
    CVE-2025-65104

    Firebird: Information leak vulnerability in firebird3 client when used with newer server

    Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed…

    FirebirdSQL firebird firebird3.0 firebird3.0 Debian Ubuntu
  • High 7.5
    CVE-2026-28212

    Firebird has potential server crash via null pointer dereference when processing op_slice packet

    Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an op_slice network packet, the server passes an unprepared structure containing a null pointer to the SDL_info() function, …

    FirebirdSQL firebird firebird3.0 firebird3.0 Debian Ubuntu
  • High 7.5
    CVE-2026-33337

    Firebird has a buffer overflow when parsing corrupted slice packets

    Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when deserializing a slice packet, the xdr_datum() function does not validate that a cstring length conforms to the slice descriptor bounds, allowi…

    FirebirdSQL firebird firebird3.0 firebird3.0 Debian Ubuntu
  • High 7.5
    CVE-2026-34232

    Firebird: DoS via `op_response` packet from client

    Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the xdr_status_vector() function does not handle the isc_arg_cstring type when decoding an op_response packet, causing a server crash when one is e…

    FirebirdSQL firebird firebird3.0 firebird3.0 Debian Ubuntu
  • High 7.5
    CVE-2026-35215

    Firebird: DoS via malicious slice descriptor in slice packet

    Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdl_desc() function does not validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor is later used to cal…

    FirebirdSQL firebird firebird3.0 firebird3.0 Debian Ubuntu
  • Medium 6.0
    CVE-2026-28214

    Firebird server hangs when using specific clumplet on batch creation

    Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize() function can overflow the totalLength value when parsing a Wide type clumplet, causing an infinite loop. An a…

    FirebirdSQL firebird firebird3.0 firebird3.0 Debian Ubuntu

Revision history

  1. #2

    Neue Updates von SUSE aufgenommen

  2. #1

    Initiale Fassung

References