CVE-2023-41038 Server crash when using specific form of SET BIND statement

2024-03-2014:22:50

CWE-770

GitHub_M

www.cve.org

firebird

server crash

set bind

stack corruption

vulnerability

patched version

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.0%

JSON

Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash when a user uses a specific form of SET BIND statement. Any non-privileged user with minimum access to a server may type a statement with a long CHAR length, which causes the server to crash due to stack corruption. Versions 4.0.4.2981 and 5.0.0.117 contain fixes for this issue. No known workarounds are available.

CNA Affected

[
  {
    "vendor": "FirebirdSQL",
    "product": "firebird",
    "versions": [
      {
        "version": ">= 4.0.0, < 4.0.4.2981",
        "status": "affected"
      },
      {
        "version": ">= 5.0 beta1, < 5.0.0.1176",
        "status": "affected"
      }
    ]
  }
]