CVE-2014-9323: Canonical Ubuntu Linux

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.

Affected products

• Canonical Ubuntu Linux: version 14.04 only
• Debian Debian Linux: version 7.0 only; version 8.0 only
• Firebirdsql Firebird: before 2.1.7 (fixed in 2.1.7); from 2.5, up to and including 2.5.3
• Opensuse Evergreen: version 11.4 only

Published 2014-12-16. Last modified 2026-06-17.