Crash Vulnerability in Firebird Open-Source Database Management System
CVE-2026-34232
7.5HIGH
What is CVE-2026-34232?
Firebird, a popular open-source relational database management system, has a vulnerability affecting its handling of the isc_arg_cstring type within the xdr_status_vector() function. This flaw occurs when decoding op_response packets. An unauthenticated attacker could exploit this weakness by sending a specially crafted op_response packet, leading to a server crash. The issue has been addressed in the latest versions: 5.0.4, 4.0.7, and 3.0.14. It is recommended to upgrade to these versions to ensure system stability and security.
Affected Version(s)
firebird >= 3.0.0, < 3.0.14 < 3.0.0, 3.0.14
firebird >= 4.0.0, < 4.0.7 < 4.0.0, 4.0.7
firebird >= 5.0.0, < 5.0.4 < 5.0.0, 5.0.4