Firebird vulnerabilities

Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption by processing specially crafted data in config\ConfigFile.cpp or msgs\check_msgs.epp. This may lead to unspecified impacts, including potential code execution.

In Firebird, an open-source relational database management system, versions prior to 5.0.4, 4.0.7 and 3.0.14 have a flaw in ClumpletReader::getClumpletSize() that can overflow totalLength when parsing a Wide clumplet, causing an infinite loop. An authenticated user with INSERT privileges on any table can exploit this via a crafted Batch Parameter Block to cause a denial of service against the server. The issue is fixed in 5.0.4, 4.0.7 and 3.0.14.

The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.