CVE-2025-65104

HIGH

7.9

Description

Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.

Details CVE

Score CVSS v3.17.9

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie4/17/2026

Derniere modification4/17/2026

Sourcenvd

Observations honeypot0

Faiblesses (CWE)

CWE-200

References

https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.0(security-advisories@github.com)

https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-mfpr-9886-xjhg(security-advisories@github.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.