Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number from CNCT information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade firebird21-serverUpgrade firebird25-server | Dec 10, 2025 | Mar 6, 2013 |
| Gentoo Linux | — | Upgrade dev-db/firebird. | Oct 30, 2017 | Mar 15, 2013 |
| Suse | — | Upgrade libfbclient2-x86Upgrade libfbclient2-32bitUpgrade firebird-debuginfoUpgrade libfbembed2-x86Upgrade firebird-superserverUpgrade firebird-classic-debuginfoUpgrade firebird-filesystemUpgrade libfbembed2-32bitUpgrade firebird-devel-debuginfoUpgrade firebird-docUpgrade libfbclient2-debuginfo-x86Upgrade libfbembed2Upgrade firebirdUpgrade libfbclient2-debuginfoUpgrade libfbembed2-debuginfo-32bitUpgrade firebird-superserver-debuginfoUpgrade firebird-classicUpgrade libfbclient2-develUpgrade firebird-debugsourceUpgrade libfbembed2_5Upgrade libfbclient2-debuginfo-32bitUpgrade libfbclient2Upgrade libfbembed2-debuginfo-x86Upgrade firebird-32bitUpgrade libfbembed2-debuginfoUpgrade libfbembed-develUpgrade firebird-devel | Feb 17, 2015 | Mar 15, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub