Düşük PoC var
CVE-2014-9323: Firebird: NULL işaretçi başvurusu
Açıklama (NVD)
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.
Özet bilgiler
- Ürün
- Firebirdsql Firebird
- EPSS
- %2,90 (yüzdelik 87)
- CWE
- CWE-476
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| firebirdsql-firebird | — | — | 2.1.7 |
| firebirdsql-firebird | 2.5 | 2.5.3 | — |
| opensuse-evergreen | 11.4 | 11.4 | — |
| debian-debian-linux | 7.0 | 7.0 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |