CVE-2014-9323: firebird before 2.1.7 (exclusive), from 2.5 (inclusive), through 2.5.3 (inclusive); +4 more affected products

Affected technology

firebird · before 2.1.7 (exclusive)
firebirdsql

firebird · from 2.5 (inclusive), through 2.5.3 (inclusive)
firebirdsql

evergreen · 11.4
opensuse

debian linux · 7.0
debian

debian linux · 8.0
debian

ubuntu linux · 14.04
canonical

n/a · n/a
Vendor not specified by the source

Description’s affected range: before 2.1.7 and 2.5.x before 2.5.3 SU1

Component: Not specified by the source
Function: in

Attack conditions (NVD, CVSS 2.0): Network (remote)

What an attacker can do

Remote attackers can cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status. NVD’s CVSS 2.0 assessment (base score 5.0/10) rates confidentiality and integrity impact as none; availability impact as partial.