CVE-2015-2788

CRITICAL 10.0CVE-2015-2788 · Published 14/04/2015 · updated 17/06/2026

In short

CVE-2015-2788 is a CRITICAL (CVSS 10.0) vulnerability affecting dbd-firebird (debian).
Chance of exploitation in the next 30 days (EPSS): 4.2%, higher than 91.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dbd-firebird debian	`≤ 1.18`	No fix yet

Description

Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.

References

debian.org/security/2015/dsa-3219
openwall.com/lists/oss-security/2015/03/30/10
openwall.com/lists/oss-security/2015/03/30/4
securityfocus.com/bid/73409
bugs.debian.org/cgi-bin/bugreport.cgi
metacpan.org/source/DAM/DBD-Firebird-1.19/Changes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free