debian/firebird3.0 vulnerabilities

Latest debian/firebird3.0 CVEs

Newest publication first

1. CVE-2026-40342 Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution

   Published 2026-04-17

   Critical·CVSS 10.0 EPSS 0.69%

   Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the external engine plugin loader concatenates a user-supplied engine name into a filesystem path without filtering path separators or .. components. An authenticated u...

2. CVE-2026-35215 Firebird: DoS via malicious slice descriptor in slice packet

   Published 2026-04-17

   High·CVSS 7.5 EPSS 0.47%

   Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdl_desc() function does not validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor is later used to calculate the number of...

3. CVE-2026-34232 Firebird: DoS via `op_response` packet from client

   Published 2026-04-17

   High·CVSS 7.5 EPSS 0.47%

   Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the xdr_status_vector() function does not handle the isc_arg_cstring type when decoding an op_response packet, causing a server crash when one is encountered in the sta...

4. CVE-2026-33337 Firebird has a buffer overflow when parsing corrupted slice packets

   Published 2026-04-17

   High·CVSS 7.5 EPSS 0.54%

   Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when deserializing a slice packet, the xdr_datum() function does not validate that a cstring length conforms to the slice descriptor bounds, allowing a cstring longer t...

5. CVE-2026-28224 Firebird Null Pointer Dereference via CryptCallback causes DOS

   Published 2026-04-17

   High·CVSS 8.2 EPSS 0.46%

   Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when the server receives an op_crypt_key_callback packet without prior authentication, the port_server_crypt_callback handler is not initialized, resulting in a null po...

6. CVE-2026-28214 Firebird server hangs when using specific clumplet on batch creation

   Published 2026-04-17

   Medium·CVSS 6.0 EPSS 1.1%

   Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize() function can overflow the totalLength value when parsing a Wide type clumplet, causing an infinite loop. An authenticated user wit...

7. CVE-2026-27890 Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments

   Published 2026-04-17

   High·CVSS 8.2 EPSS 0.46%

   Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCT_specific_data segments during authentication, the server assumes segments arrive in strictly ascending order. If segments arrive out of order, the...

8. CVE-2026-28212 Firebird has potential server crash via null pointer dereference when processing op_slice packet

   Published 2026-04-17

   High·CVSS 7.5 EPSS 0.50%

   Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an op_slice network packet, the server passes an unprepared structure containing a null pointer to the SDL_info() function, resulting in a null p...

9. CVE-2025-65104 Firebird: Information leak vulnerability in firebird3 client when used with newer server

   Published 2026-04-17

   High·CVSS 7.5 EPSS 0.19%

   Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the...

10. DLA-4282-1 firebird3.0 - security update

    Published 2025-08-25

    Unknown

11. CVE-2025-24975 Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External

    Published 2025-08-15

    High·CVSS 8.8 EPSS 0.59%

    Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnerable if ExtConnPoolSize is not set equal to 0. If connections stored in ExtConnPool are not verified for presence and suitability of the CryptCallback interface...

12. CVE-2025-54989 Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability

    Published 2025-08-15

    High·CVSS 7.5 EPSS 0.68%

    Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL pointer dereference denial-of-service vulnerability in Firebird. This specific flaw exists within the parsing of xdr message from client. It leads to NULL pointer d...

13. CVE-2023-41038 Server crash when using specific form of SET BIND statement

    Published 2024-03-20

    High·CVSS 7.5 EPSS 0.66%

    Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash when a user uses a specific form of SET BIND statement. Any non-privileged user with minimum access to a server may type a statement with a long CHAR length, whi...

14. DLA-2824-1 firebird3.0 - security update

    Published 2021-11-20

    Unknown

15. CVE-2017-11509 An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement.

    Published 2018-03-28

    High·CVSS 8.8 EPSS 6.1%

    An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement.

16. CVE-2017-6369 Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so.

    Published 2017-03-24

    High·CVSS 8.8 EPSS 3.3%

    Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.