HIGH🇬🇧 English

CVE-2025-65104

CVSS 7.9v3.1pub. 2026-04-17upd. 2026-04-24

Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

  • Firebirdsql Firebird

    APP
    Firebirdsql
    < 3.0.14
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2026-40342CRITICAL9.9PL ✓ten sam produkt

RCE przez path traversal w ładowaniu wtyczek zewnętrznych Firebird

CVE-2026-28212HIGH7.5ten sam produkt

Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and...

CVE-2026-28224HIGH8.2ten sam produkt

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14...

CVE-2026-27890HIGH8.2ten sam produkt

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14...

CVE-2026-33337HIGH7.5ten sam produkt

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14...