CVE-2026-34232

The CVE concerns Firebird (open-source RDBMS). Vulnerability: in affected releases prior to 5.0.4, 4.0.7 and 3.0.14, the xdr_status_vector() function fails to handle the isc_arg_cstring type when decoding an op_response packet, allowing an unauthenticated attacker to crash the server by sending a...

CVE-2026-34232: Improper Handling of Syntactically Invalid Structure

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the xdrstatusvector function does not handle the iscargcstring type when decoding an opresponse packet, causing a server crash when one is encountered in the status vector. An...

SUSE CVE-2014-9323

The xdrstatusvector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service NULL pointer dereference, segmentation fault, and crash via an opresponse action with a non-empty status...

CVE-2014-9323

The xdrstatusvector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service NULL pointer dereference, segmentation fault, and crash via an opresponse action with a non-empty status...

CVE-2014-9323: NULL Pointer Dereference

The xdrstatusvector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service NULL pointer dereference, segmentation fault, and crash via an opresponse action with a non-empty status...