Medium · published December 16, 2014
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.
| Product | Versions | Fixed in |
|---|---|---|
| firebirdsql/firebird | < 2.1.7 | 2.1.7 |
| firebirdsql/firebird | ≥ 2.5, ≤ 2.5.3 | — |
| opensuse/evergreen | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |