CVE:CVE-2014-9323
CNNVD:CNNVD-201412-361
Firebird是Firebird基金会的一套开源跨平台的提供多个ANSI SQL-92功能的关系型数据库管理系统。
Firebird 2.1.7之前版本和2.5.3 SU1之前2.5.x版本的‘xdr_status_vector’函数中存在安全漏洞。远程攻击者可借助带有non-empty状态的op_response操作利用该漏洞造成拒绝服务（空指针逆向引用，分段错误和崩溃）。
solution:Upgrade firebirdsql firebird to a higher version than 2.1.7,2.5.3,and avoid the version (,2.1.7),[2.5,2.5.3]; Upgrade opensuse evergreen to a higher version than 11.4,and avoid the version 11.4; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,and avoid the version 14.04