Lucene search

K
ubuntuUbuntuUSN-3929-1
HistoryApr 02, 2019 - 12:00 a.m.

Firebird vulnerabilities

2019-04-0200:00:00
ubuntu.com
70

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.018

Percentile

88.3%

Releases

  • Ubuntu 14.04 ESM

Packages

  • firebird2.5 - A full-featured, open source SQL database derived from Borland InterBase 6.0

Details

It was discovered that Firebird incorrectly handled certain malformed
packets. A remote attacker could possibly use this issue with a specially
crafted network packet to cause Firebird to crash, resulting in a denial of
service.
(CVE-2014-9323)

It was discovered that Firebird incorrectly handled certain UDF libraries.
A remote attacker could possibly use this issue to execute arbitrary code.
(CVE-2017-6369)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchfirebird2.5-classic< 2.5.2.26540.ds4-9ubuntu1.1UNKNOWN
Ubuntu14.04noarchfirebird-dev< 2.5.2.26540.ds4-9ubuntu1.1UNKNOWN
Ubuntu14.04noarchfirebird-dev-dbgsym< 2.5.2.26540.ds4-9ubuntu1.1UNKNOWN
Ubuntu14.04noarchfirebird2.5-classic-common< 2.5.2.26540.ds4-9ubuntu1.1UNKNOWN
Ubuntu14.04noarchfirebird2.5-classic-common-dbgsym< 2.5.2.26540.ds4-9ubuntu1.1UNKNOWN
Ubuntu14.04noarchfirebird2.5-classic-dbg< 2.5.2.26540.ds4-9ubuntu1.1UNKNOWN
Ubuntu14.04noarchfirebird2.5-classic-dbgsym< 2.5.2.26540.ds4-9ubuntu1.1UNKNOWN
Ubuntu14.04noarchfirebird2.5-server-common< 2.5.2.26540.ds4-9ubuntu1.1UNKNOWN
Ubuntu14.04noarchfirebird2.5-server-common-dbgsym< 2.5.2.26540.ds4-9ubuntu1.1UNKNOWN
Ubuntu14.04noarchfirebird2.5-super< 2.5.2.26540.ds4-9ubuntu1.1UNKNOWN
Rows per page:
1-10 of 211

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.018

Percentile

88.3%