Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize() function can overflow the totalLength value when parsing a Wide type clumplet, causing an infinite loop. An authenticated user with INSERT privileges on any table can exploit this via a crafted Batch Parameter Block to cause a denial of service against the server. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.
References
| Link | Resource |
|---|---|
| https://github.com/FirebirdSQL/firebird/releases/tag/v3.0.14 | Release Notes |
| https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.7 | Release Notes |
| https://github.com/FirebirdSQL/firebird/releases/tag/v5.0.4 | Release Notes |
| https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-7cq5-994r-jhrf | Exploit Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
24 Apr 2026, 19:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:* | |
| First Time |
Firebirdsql firebird
Firebirdsql |
|
| References | () https://github.com/FirebirdSQL/firebird/releases/tag/v3.0.14 - Release Notes | |
| References | () https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.7 - Release Notes | |
| References | () https://github.com/FirebirdSQL/firebird/releases/tag/v5.0.4 - Release Notes | |
| References | () https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-7cq5-994r-jhrf - Exploit, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
17 Apr 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-17 19:16
Updated : 2026-04-24 19:47
NVD link : CVE-2026-28214
Mitre link : CVE-2026-28214
CVE.ORG link : CVE-2026-28214
JSON object : View
Products Affected
firebirdsql
- firebird