FirebirdSQL Firebird up to 3.0.13/4.0.6/5.0.3 sdl_desc divide by zero

Summaryinfo

A vulnerability marked as problematic has been reported in FirebirdSQL Firebird up to 3.0.13/4.0.6/5.0.3. This impacts the function sdl_desc. The manipulation leads to divide by zero. This vulnerability is listed as CVE-2026-35215. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in FirebirdSQL Firebird up to 3.0.13/4.0.6/5.0.3. This issue affects the function sdl_desc. The manipulation with an unknown input leads to a divide by zero vulnerability. Using CWE to declare the problem leads to CWE-369. The product divides a value by zero. Impacted is availability. The summary by CVE is:

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdl_desc() function does not validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor is later used to calculate the number of slice items, causing a division by zero. An unauthenticated attacker can exploit this by sending a crafted slice packet to crash the server. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2026-35215 since 04/01/2026. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1499 according to MITRE ATT&CK.

The vulnerability scanner Nessus provides a plugin with the ID 307401 (Linux Distros Unpatched Vulnerability : CVE-2026-35215), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 3.0.14, 4.0.7 or 5.0.4 eliminates this vulnerability. The upgrade is hosted for download at github.com.

The vulnerability is also documented in the vulnerability database at Tenable (307401). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Database Administration Software

Vendor

• FirebirdSQL

Name

• Firebird

Version

• 3.0.0
• 3.0.1
• 3.0.2
• 3.0.3
• 3.0.4
• 3.0.5
• 3.0.6
• 3.0.7
• 3.0.8
• 3.0.9
• 3.0.10
• 3.0.11
• 3.0.12
• 3.0.13
• 4.0.0
• 4.0.1
• 4.0.2
• 4.0.3
• 4.0.4
• 4.0.5
• 4.0.6
• 5.0.0
• 5.0.1
• 5.0.2
• 5.0.3

License

• open-source

Website

• Product: https://github.com/FirebirdSQL/firebird/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion