« Volver al listado

CVE-2023-41038

Estado: AnalizadaAlta (7.5)—

Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash when a user uses a specific form of SET BIND statement. Any non-privileged user with minimum access to a server may type a statement with a long `CHAR` length, which causes the server to crash due to stack corruption. Versions 4.0.4.2981 and 5.0.0.117 contain fixes for this issue. No known workarounds are available.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Firebirdsql — Firebird

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-41038",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-41038",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-03-20T19:37:40.792401Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "FirebirdSQL",
          "product": "firebird",
          "versions": [
            {
              "status": "affected",
              "version": ">= 4.0.0, < 4.0.4.2981"
            },
            {
              "status": "affected",
              "version": ">= 5.0 beta1, < 5.0.0.1176"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*"
          ],
          "vendor": "firebirdsql",
          "product": "firebird",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.0",
              "lessThan": "4.0.4.2981",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "5.0_beta1",
              "lessThan": "5.0.0.1176",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-03-20T15:15:07.290",
  "references": [
    {
      "url": "https://firebirdsql.org/en/snapshot-builds",
      "tags": [
        "Product"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-6fv8-8rwr-9692",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://firebirdsql.org/en/snapshot-builds",
      "tags": [
        "Product"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-6fv8-8rwr-9692",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash when a user uses a specific form of SET BIND statement. Any non-privileged user with minimum access to a server may type a statement with a long `CHAR` length, which causes the server to crash due to stack corruption. Versions 4.0.4.2981 and 5.0.0.117 contain fixes for this issue. No known workarounds are available."
    },
    {
      "lang": "es",
      "value": "Firebird es una base de datos relacional. Las versiones 4.0.0 a 4.0.3 y la versión 5.0 beta1 son vulnerables a un bloqueo del servidor cuando un usuario utiliza una forma específica de la declaración SET BIND. Cualquier usuario sin privilegios con un acceso mínimo a un servidor puede escribir una declaración con una longitud `CHAR` larga, lo que hace que el servidor se bloquee debido a la corrupción de la pila. Las versiones 4.0.4.2981 y 5.0.0.117 contienen correcciones para este problema. No se conocen workarounds disponibles."
    }
  ],
  "lastModified": "2026-06-17T06:20:13.533",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EFE0C34-8E5F-4D5C-B072-D6319FC7E081",
              "versionEndIncluding": "4.0.3",
              "versionStartIncluding": "4.0.0"
            },
            {
              "criteria": "cpe:2.3:a:firebirdsql:firebird:5.0:beta1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1A6D3C4-2FA7-4F20-ACB5-679D82DDC008"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-advisories@github.com"
}