CVE-2015-2788 in DBD-Firebird

Résumé

par MITRE

Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 29/03/2015
• Divulgation: 14/04/2015
• Modérer: accepté
• Entrée: VDB-74862
• CPE: prêt
• CWE: CWE-119 (confirmé)
• CVSS: 10.0 (NVD)
• EPSS: 0.04246
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider, Police, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-2788
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-2788
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-2788/