FI
Product
firebird
46
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 12Medium 2Low 0
Watch
Add firebird to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40342 | 9.9 | Apr 17 | Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution Affected: < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4 |
| CVE-2025-24975 | 8.8 | Aug 15 | Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External Affected: < 6.0.0.609; < 5.0.2.1610; < 4.0.6.3183 |
| CVE-2017-11509 | 8.8 | Mar 28 | An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement Affected: 2.5.7; 3.0.2 |
| CVE-2017-6369 | 8.8 | Mar 24 | Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from… Affected: 2.5.0 before 2.5.7; 3.0.0 before 3.0.2 |
| CVE-2026-28224 | 8.2 | Apr 17 | Firebird Null Pointer Dereference via CryptCallback causes DOS Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4 |
| CVE-2026-27890 | 8.2 | Apr 17 | Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4 |
| CVE-2026-35215 | 7.5 | Apr 17 | Firebird: DoS via malicious slice descriptor in slice packet Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4 |
| CVE-2026-34232 | 7.5 | Apr 17 | Firebird: DoS via `op_response` packet from client Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4 |
| CVE-2026-33337 | 7.5 | Apr 17 | Firebird has a buffer overflow when parsing corrupted slice packets Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4 |
| CVE-2026-28212 | 7.5 | Apr 17 | Firebird has potential server crash via null pointer dereference when processing op_slice packet Affected: < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4 |
| CVE-2025-65104 | 7.5 | Apr 17 | Firebird: Information leak vulnerability in firebird3 client when used with newer server Affected: < 4.0.0 |
| CVE-2025-54989 | 7.5 | Aug 15 | Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability Affected: < 3.0.13; < 4.0.6; < 5.0.3 |
| CVE-2023-41038 | 7.5 | Mar 20 | Firebird is a relational database Affected: 4.0.0 through 4.0.3; 5.0 |
| CVE-2026-28214 | 6.5 | Apr 17 | Firebird server hangs when using specific clumplet on batch creation Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4 |
| CVE-2016-1569 | 6.5 | Jan 13 | FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter Affected: 2.5.5 |
| CVE-2014-9323 | – | Dec 16 | The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation… Affected: before 2.1.7; 2.5 through 2.5.3 |
| CVE-2013-2492 | – | Mar 15 | Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a… Affected: 2.1.3; 2.1.4; 2.1.5; 2.5.1; 2.5.2; 2.5.3 |
| CVE-2012-5529 | – | Nov 20 | TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing… Affected: 2.5.0; 2.5.1 |
| CVE-2009-2620 | – | Jul 29 | src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of… Affected: 1.5 before 1.5.6; 2.0.0 before 2.0.6; 2.1 before 2.1.3; 2.5.0; 2.5.0; 2.5.0 |
| CVE-2008-0387 | – | Jan 29 | Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via… Affected: through 1.0.3; 1.5 before 1.5.6; 2.0.0 before 2.0.4; 2.1.0 |
| CVE-2008-0467 | – | Jan 29 | Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username Affected: through 2.0.3; through 2.1 |
| CVE-2007-4992 | – | Oct 11 | Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port… Affected: 2.0.2 |
| CVE-2007-5246 | – | Oct 6 | Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via (1) a… Affected: 2.0.0.12748; 2.0.0.12748; 2.0.1.12855; 2.0.1.12855 |
| CVE-2007-5245 | – | Oct 6 | Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via (1) a long… Affected: 1.5.3.4870; 1.5.3.4870; 1.5.4.4910; 1.5.4.4910 |
| CVE-2007-4667 | – | Sep 4 | Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149 Affected: through 2.0.1 |
| CVE-2007-4669 | – | Sep 4 | The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148 Affected: through 2.0.1 |
| CVE-2007-4668 | – | Sep 4 | Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access,"… Affected: through 2.0.1 |
| CVE-2007-4664 | – | Sep 4 | Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename exceeds MAX_PATH_LEN, has unknown impact and… Affected: through 2.0.1 |
| CVE-2007-4666 | – | Sep 4 | Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU… Affected: through 2.0.1 |
| CVE-2007-4665 | – | Sep 4 | Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple… Affected: through 2.0.1 |
| CVE-2007-3527 | – | Jul 3 | Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service (CPU consumption) via certain database operations with multi-byte character sets… Affected: 2.0.0 |
| CVE-2006-7212 | – | Jun 29 | Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors Affected: 1.5 |
| CVE-2006-7214 | – | Jun 29 | Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial of service (application crash) by sending many remote protocol versions; and (2)… Affected: 1.5 |
| CVE-2006-7213 | – | Jun 29 | Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database Affected: 1.5 |
| CVE-2006-7211 | – | Jun 29 | fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking… Affected: 1.5 |
| CVE-2007-3181 | – | Jun 12 | Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect… Affected: through 2.0.0 |
| CVE-2007-2606 | – | May 11 | Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1)… Affected: 2.1 |
| CVE-2006-1240 | – | Mar 15 | Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument Affected: 1.5; 1.5.1; 1.5.2 |
| CVE-2006-1241 | – | Mar 15 | Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid firebird permissions, which might allow local users to gain privileges via a buffer… Affected: 1.5.2.4731 |
| CVE-2004-1449 | – | Dec 31 | Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload… Affected: 0.7 |
| CVE-2004-0779 | – | Aug 18 | The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted… Affected: 0.7 |
| CVE-2004-0718 | – | Jul 27 | The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that… Affected: 0.7 |
| CVE-2004-2043 | – | May 1 | Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause… Affected: 1.0 |
| CVE-2003-0281 | – | Jun 16 | Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a… Affected: 1.0.2 |
| CVE-2003-0197 | – | Apr 11 | Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK) Affected: 1.0.2 |
| CVE-2001-0008 | – | Feb 12 | Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures Affected: through 0.9.3 |
Showing 46