NULL pointer dereference in Firebirdsql Firebird
CVE-2014-9323
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty st…
EPSS: 0.015 (81.4th percentile) — read the EPSS interpretation.
Affected products
- Firebirdsql Firebird
- Canonical Ubuntu_linux — versions 14.04
- Debian Debian_linux — versions 7.0, 8.0
- Opensuse Evergreen — versions 11.4
- N/a — versions n/a
Weakness classification (CWE)
References
- DSA-3109 (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- MDVSA-2015:172 (vendor-advisory, x_refsource_MANDRIVA, Broken Link)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Vendor Advisory)
- openSUSE-SU-2014:1621 (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
- USN-3929-1 (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)