CVE-2026-28214
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
In Firebird, an open-source relational database management system, versions prior to 5.0.4, 4.0.7 and 3.0.14 have a flaw in ClumpletReader::getClumpletSize() that can overflow totalLength when parsing a Wide clumplet, causing an infinite loop. An authenticated user with INSERT privileges on any table can exploit this via a crafted Batch Parameter Block to cause a denial of service against the server. The issue is fixed in 5.0.4, 4.0.7 and 3.0.14.
Risk Assessment
An authenticated attacker could cause the database server to hang or become unavailable, disrupting application operations. This may lead to service outages and loss of productivity.
Recommendation
Update Firebird to version 5.0.4, 4.0.7, or 3.0.14 (or later). Restrict INSERT privileges to necessary users and monitor for unusual queries.
Other vulnerabilities in Firebird
See all- CVE-2007-2606High
Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption by processing specially crafted data in config\ConfigFile.cpp or msgs\check_msgs.epp. This may lead to unspecified impacts, including potential code execution.
- CVE-2014-9323Medium
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.
Original NVD description (English source)
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize() function can overflow the totalLength value when parsing a Wide type clumplet, causing an infinite loop. An authenticated user with INSERT privileges on any table can exploit this via a crafted Batch Parameter Block to cause a denial of service against the server. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS