CVE-2017-11509

An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement.

Score

CVSS 3.1 8.8 High

Status

Modified - vulnreport@tenable.com

Published

2018-03-28

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Debian Linux (Debian)
• Firebird Sql Server (Firebird Foundation)
• Firebird (Firebirdsql)

References

• https://lists.debian.org/debian-lts-announce/2018/05/msg00005.html
• https://lists.debian.org/debian-lts-announce/2020/02/msg00036.html
• https://lists.debian.org/debian-lts-announce/2021/11/msg00018.html
• https://www.tenable.com/security/research/tra-2017-36