[SECURITY] [DLA 123-1] firebird2.5 security update

2014-12-2316:15:25

lists.debian.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.022 Low

EPSS

Percentile

89.4%

JSON

Package : firebird2.5
Version : 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2
CVE ID : CVE-2014-9323
Debian Bug : 772880

Apply patch from upstream revision 60322 fixing an unauthenticated remote
null-pointer dereference crash.

OSVersionArchitecturePackageVersionFilename
Debian6allfirebird2.5-super< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2firebird2.5-super_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian6allfirebird2.5-classic< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2firebird2.5-classic_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian6alllibib-util< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2libib-util_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian6allfirebird2.5-dev< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2firebird2.5-dev_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian6alllibfbembed2.5< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2libfbembed2.5_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian6alllibfbclient2< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2libfbclient2_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian6allfirebird2.5-superclassic< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2firebird2.5-superclassic_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian6allfirebird2.5-common< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2firebird2.5-common_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian6allfirebird2.5-examples< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2firebird2.5-examples_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian6allfirebird2.5-doc< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2firebird2.5-doc_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	all	firebird2.5-super	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	firebird2.5-super_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian	6	all	firebird2.5-classic	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	firebird2.5-classic_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian	6	all	libib-util	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	libib-util_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian	6	all	firebird2.5-dev	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	firebird2.5-dev_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian	6	all	libfbembed2.5	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	libfbembed2.5_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian	6	all	libfbclient2	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	libfbclient2_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian	6	all	firebird2.5-superclassic	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	firebird2.5-superclassic_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian	6	all	firebird2.5-common	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	firebird2.5-common_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian	6	all	firebird2.5-examples	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	firebird2.5-examples_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb
Debian	6	all	firebird2.5-doc	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	firebird2.5-doc_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_all.deb