Vulnerability Details CVE-2017-11509
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.077
EPSS Ranking 91.4%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
- https://lists.debian.org/debian-lts-announce/2018/05/msg00005.html
- https://lists.debian.org/debian-lts-announce/2020/02/msg00036.html
- https://lists.debian.org/debian-lts-announce/2021/11/msg00018.html
- https://www.tenable.com/security/research/tra-2017-36
- https://lists.debian.org/debian-lts-announce/2018/05/msg00005.html
- https://lists.debian.org/debian-lts-announce/2020/02/msg00036.html
- https://lists.debian.org/debian-lts-announce/2021/11/msg00018.html
- https://www.tenable.com/security/research/tra-2017-36
Products affected by CVE-2017-11509
-
cpe:2.3:a:firebirdsql:firebird:2.5.7
-
cpe:2.3:a:firebirdsql:firebird:3.0.2
-
cpe:2.3:o:debian:debian_linux:7.0
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0