Unscored severity · published Apr 14, 2015
CVE-2015-2788
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors…
–
CVSS
4.2%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DB
Dbd-firebird · Debian
through 1.18 · source: NVD
DL
Debian Linux · Debian
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2788
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2788
www.debian.org
http://www.debian.org/security/2015/dsa-3219
www.openwall.com
http://www.openwall.com/lists/oss-security/2015/03/30/10
www.openwall.com
http://www.openwall.com/lists/oss-security/2015/03/30/4
www.securityfocus.com
http://www.securityfocus.com/bid/73409
bugs.debian.org
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780925
metacpan.org
https://metacpan.org/source/DAM/DBD-Firebird-1.19/Changes