Login Request a demo
Medium severity · published Jan 13, 2016
CVE-2016-1569
FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter
6.5
CVSS
2.3%
EPSS
No
On KEV
Description
FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Firebird · Firebirdsql
2.5.5 · source: NVD
Affected product
FI
Firebird
Firebirdsql
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-1569
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-1569
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177119.html
sourceforge.net
http://sourceforge.net/p/firebird/code/62783/
tracker.firebirdsql.org
http://tracker.firebirdsql.org/browse/CORE-5068
www.openwall.com
http://www.openwall.com/lists/oss-security/2016/01/10/2
Exploit
http://www.openwall.com/lists/oss-security/2016/01/10/3
More from Firebird
9.9
CVE-2026-40342
Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution
8.8
CVE-2025-24975
Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
8.8
CVE-2017-11509
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement
8.8
CVE-2017-6369
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from…
8.2
CVE-2026-28224
Firebird Null Pointer Dereference via CryptCallback causes DOS