CVE-2026-27890

216.73.217.64

· Published 17/04/2026 19:16 · Modified 17/04/2026 19:16

Labels: CVE-2026-27890 2026-04-17 CVE-2026-27890 CWE-119 [email protected]

Essential information

Published: 17/04/2026 19:16
Modified: 17/04/2026 19:16
Author: —
Creator: —
CVSS: 8.2 HIGH (v3.1)
CISA KEV: No
CWE: —
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

CVSS metrics

Description

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCT_specific_data segments during authentication, the server assumes segments arrive in strictly ascending order. If segments arrive out of order, the Array class's grow() method computes a negative size value, causing a SIGSEGV crash. An unauthenticated attacker who knows only the server's IP and port can exploit this to crash the server. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.

NVD status

Status: Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
firebird / firebird	`cpe:2.3:a:firebird:firebird:5.0.4:::::::*`
firebird / firebird	`cpe:2.3:a:firebird:firebird:4.0.7:::::::*`
firebird / firebird	`cpe:2.3:a:firebird:firebird:3.0.14:::::::*`