The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3929-1 advisory.

    It was discovered that Firebird incorrectly handled certain malformed packets. A remote attacker could     possibly use this issue with a specially crafted network packet to cause Firebird to crash, resulting in a     denial of service. (CVE-2014-9323)

    It was discovered that Firebird incorrectly handled certain UDF libraries. A remote attacker could     possibly use this issue to execute arbitrary code. (CVE-2017-6369)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Segfault in server caused by malformed network packet. See:
http://tracker.firebirdsql.org/browse/CORE-4630

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Apply patch from upstream revision 60322 fixing an unauthenticated remote NULL pointer dereference crash.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

These updates fix the recently discovered security vulnerability (CORE-4630) that may be used for a remote DoS attack performed by unauthorized users

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Dmitry Kovalenko discovered that the Firebird database server is prone to a denial of service vulnerability. An unauthenticated remote attacker could send a malformed network packet to a firebird server, which would cause the server to crash.

The version of Firebird SQL Server installed on the remote host is vulnerable to a remote denial of service attack.

ID	Name	Product	Family	Severity
123675	Ubuntu 14.04 LTS : Firebird vulnerabilities (USN-3929-1)	Nessus	Ubuntu Local Security Checks	high
82113	Debian DLA-130-1 : firebird2.1 security update	Nessus	Debian Local Security Checks	medium
82106	Debian DLA-123-1 : firebird2.5 security update	Nessus	Debian Local Security Checks	medium
80138	Fedora 21 : firebird-2.5.2.26539.0-14.fc21 (2014-16561)	Nessus	Fedora Local Security Checks	medium
80136	Fedora 20 : firebird-2.5.2.26539.0-10.fc20 (2014-16524)	Nessus	Fedora Local Security Checks	medium
80127	Debian DSA-3109-1 : firebird2.5 - security update	Nessus	Debian Local Security Checks	medium
80104	Firebird SQL Server Remote Denial of Service (CVE-2014-9323)	Nessus	Windows	medium

Detections

Analytics

CVE-2014-9323

high

Tenable Plugins

high

medium

medium

medium

medium

medium

medium