[SECURITY] [DLA 130-1] firebird2.1 security update

2015-01-0821:29:45

lists.debian.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.7

Confidence

High

EPSS

0.018

Percentile

88.3%

JSON

Package : firebird2.1
Version : 2.1.3.18185-0.ds1-11+squeeze2
CVE ID : CVE-2014-9323

Segfault in server caused by malformed network packet.
See: http://tracker.firebirdsql.org/browse/CORE-4630

OSVersionArchitecturePackageVersionFilename
Debian7s390libfbembed2.5< 2.5.2.26540.ds4-1~deb7u2libfbembed2.5_2.5.2.26540.ds4-1~deb7u2_s390.deb
Debian7s390xfirebird2.5-server-common< 2.5.2.26540.ds4-1~deb7u2firebird2.5-server-common_2.5.2.26540.ds4-1~deb7u2_s390x.deb
Debian7sparclibfbclient2< 2.5.2.26540.ds4-1~deb7u2libfbclient2_2.5.2.26540.ds4-1~deb7u2_sparc.deb
Debian7mipslibib-util< 2.5.2.26540.ds4-1~deb7u2libib-util_2.5.2.26540.ds4-1~deb7u2_mips.deb
Debian6amd64firebird2.5-superclassic< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2firebird2.5-superclassic_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_amd64.deb
Debian7sparcfirebird2.5-classic< 2.5.2.26540.ds4-1~deb7u2firebird2.5-classic_2.5.2.26540.ds4-1~deb7u2_sparc.deb
Debian7armhffirebird2.5-super-dbg< 2.5.2.26540.ds4-1~deb7u2firebird2.5-super-dbg_2.5.2.26540.ds4-1~deb7u2_armhf.deb
Debian7mipselfirebird2.5-super< 2.5.2.26540.ds4-1~deb7u2firebird2.5-super_2.5.2.26540.ds4-1~deb7u2_mipsel.deb
Debian7mipsellibfbembed2.5< 2.5.2.26540.ds4-1~deb7u2libfbembed2.5_2.5.2.26540.ds4-1~deb7u2_mipsel.deb
Debian7mipsfirebird2.5-classic-common< 2.5.2.26540.ds4-1~deb7u2firebird2.5-classic-common_2.5.2.26540.ds4-1~deb7u2_mips.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	s390	libfbembed2.5	< 2.5.2.26540.ds4-1~deb7u2	libfbembed2.5_2.5.2.26540.ds4-1~deb7u2_s390.deb
Debian	7	s390x	firebird2.5-server-common	< 2.5.2.26540.ds4-1~deb7u2	firebird2.5-server-common_2.5.2.26540.ds4-1~deb7u2_s390x.deb
Debian	7	sparc	libfbclient2	< 2.5.2.26540.ds4-1~deb7u2	libfbclient2_2.5.2.26540.ds4-1~deb7u2_sparc.deb
Debian	7	mips	libib-util	< 2.5.2.26540.ds4-1~deb7u2	libib-util_2.5.2.26540.ds4-1~deb7u2_mips.deb
Debian	6	amd64	firebird2.5-superclassic	< 2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2	firebird2.5-superclassic_2.5.0.26054~ReleaseCandidate3.ds2-1+squeeze2_amd64.deb
Debian	7	sparc	firebird2.5-classic	< 2.5.2.26540.ds4-1~deb7u2	firebird2.5-classic_2.5.2.26540.ds4-1~deb7u2_sparc.deb
Debian	7	armhf	firebird2.5-super-dbg	< 2.5.2.26540.ds4-1~deb7u2	firebird2.5-super-dbg_2.5.2.26540.ds4-1~deb7u2_armhf.deb
Debian	7	mipsel	firebird2.5-super	< 2.5.2.26540.ds4-1~deb7u2	firebird2.5-super_2.5.2.26540.ds4-1~deb7u2_mipsel.deb
Debian	7	mipsel	libfbembed2.5	< 2.5.2.26540.ds4-1~deb7u2	libfbembed2.5_2.5.2.26540.ds4-1~deb7u2_mipsel.deb
Debian	7	mips	firebird2.5-classic-common	< 2.5.2.26540.ds4-1~deb7u2	firebird2.5-classic-common_2.5.2.26540.ds4-1~deb7u2_mips.deb