Server crash when using specific form of SET BIND statement
Résumé
Server crash when using specific form of SET BIND statement
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash when a user uses a specific form of SET BIND statement. Any non-privileged user with minimum access to a server may type a statement with a long CHAR length, which causes the server to crash due to stack corruption. Versions 4.0.4.2981 and 5.0.0.117 contain fixes for this issue. No known workarounds are available.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Ubuntu UBUNTU-CVE-2023-41038 firebird2.5
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web firebirdsql.org