Approved changes feed: RSS · Atom
cpe:2.3:a:firebirdsql:firebird:5.0:beta1:*:*:*:*:*:*part: a version: 5.0 update: beta1
| Vendor | Firebirdsql (e2cdbc0c-bcfd-5df0-8ad2-4acd33406fc2) |
|---|---|
| Product | Firebird (32bc038a-9b8c-5852-9764-4cb6812b5d67) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/firebird3.0 |
purl2cpe | 2026-06-01 10:12:49.884044 |
pkg:deb/ubuntu/firebird3.0 |
purl2cpe | 2026-06-01 10:12:49.884046 |
pkg:github/firebirdsql/firebird |
purl2cpe | 2026-06-01 10:12:49.884047 |
pkg:rpm/fedora/firebird |
purl2cpe | 2026-06-01 10:12:49.884049 |
pkg:rpm/opensuse/firebird |
purl2cpe | 2026-06-01 10:12:49.884050 |
pkg:sourceforge/firebird |
purl2cpe | 2026-06-01 10:12:49.884051 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41038 |
vulnerable | 2026-06-08 06:11:04.881187 |
Server crash when using specific form of SET BIND statement
HIGH (7.5)
Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash when a user uses a specific form of SET BIND statement. Any non-privileged user with minimum access to a server may type a statement with a long `CHAR` length, which causes the server to crash due to stack corruption. Versions 4.0.4.2981 and 5.0.0.117 contain fixes for this issue. No known workarounds are available.
Published: 2024-03-20T14:22:50.484Z
Updated: 2024-08-13T16:44:27.739Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.