CVE-2014-9323: The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers...

Security readout for executives and security teams

CVE-2014-9323 is a remote denial-of-service issue in older Firebird database versions. A specially formed server response condition can trigger a NULL pointer dereference, causing segmentation fault and crash. The business risk is service outage for systems still running affected Firebird 2.1 or 2.5 releases. Exposure is most likely in legacy Firebird deployments running before 2.1.7 or 2.5.x before 2.5.3 SU1, especially if the database service is reachable from untrusted networks. Packaged Linux distributions may have separate fixed package versions documented in vendor advisories. Treat this as a targeted legacy-asset availability risk. It should be remediated during normal vulnerability cycles, faster where exposed databases support critical services or are reachable beyond trusted networks. Mitigation focus: Upgrade Firebird to 2.1.7, 2.5.3 SU1, or a vendor-fixed package.; Check Debian, Ubuntu, openSUSE, Mageia, Mandriva, and Firebird advisories for package guidance.; Restrict Firebird network access to trusted application hosts and administration networks..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.