FirebirdSQL Firebird up to 3.0.13/4.0.6/5.0.3 Batch getClumpletSize integer overflow

Summaryinfo

A vulnerability categorized as problematic has been discovered in FirebirdSQL Firebird up to 3.0.13/4.0.6/5.0.3. The affected element is the function ClumpletReader::getClumpletSize of the component Batch Handler. Such manipulation leads to integer overflow. This vulnerability is referenced as CVE-2026-28214. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in FirebirdSQL Firebird up to 3.0.13/4.0.6/5.0.3. It has been rated as problematic. Affected by this issue is the function ClumpletReader::getClumpletSize of the component Batch Handler. The manipulation with an unknown input leads to a integer overflow vulnerability. Using CWE to declare the problem leads to CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. Impacted is availability. CVE summarizes:

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize() function can overflow the totalLength value when parsing a Wide type clumplet, causing an infinite loop. An authenticated user with INSERT privileges on any table can exploit this via a crafted Batch Parameter Block to cause a denial of service against the server. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2026-28214 since 02/25/2026. The exploitation is known to be easy. The attack may be launched remotely. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 307404 (Linux Distros Unpatched Vulnerability : CVE-2026-28214), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 3.0.14, 4.0.7 or 5.0.4 eliminates this vulnerability. The upgrade is hosted for download at github.com.

The vulnerability is also documented in the vulnerability database at Tenable (307404). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Database Administration Software

Vendor

• FirebirdSQL

Name

• Firebird

Version

• 3.0.0
• 3.0.1
• 3.0.2
• 3.0.3
• 3.0.4
• 3.0.5
• 3.0.6
• 3.0.7
• 3.0.8
• 3.0.9
• 3.0.10
• 3.0.11
• 3.0.12
• 3.0.13
• 4.0.0
• 4.0.1
• 4.0.2
• 4.0.3
• 4.0.4
• 4.0.5
• 4.0.6
• 5.0.0
• 5.0.1
• 5.0.2
• 5.0.3

License

• open-source

Website

• Product: https://github.com/FirebirdSQL/firebird/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion