PT-2026-33475 · Firebird+1 · Firebird Client Library+1

CVE-2025-65104 · Publicado 2026-04-17 · Atualizado 2026-05-15

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.9

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Firebird client library versão FB3

Description A biblioteca de cliente FB3 insere valores de comprimento de dados incorretos nos campos XSQLDA ao comunicar com servidores Firebird versão FB4 ou superior, resultando em vazamento de informações.

Recommendations Atualize para o cliente FB4 ou superior.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2026-07785

CVE-2025-65104

GHSA-MFPR-9886-XJHG

OESA-2026-2013

OESA-2026-2014

OESA-2026-2015

OESA-2026-2016

OESA-2026-2017

SUSE-SU-2026:1868-1

Produtos afetados

Firebird Client Library

Red Os

Referências · 36

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65104.json · Exploit
• https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-mfpr-9886-xjhg · Aviso do Fabricante
• https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.0 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-65104 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2025-65104 · Nota
• https://osv.dev/vulnerability/OESA-2026-2015 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-40342 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2025-65104 · Nota de Segurança
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-65104 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-65104 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-07785 · Nota de Segurança
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-firebird-cve-2025-65104-8.0 · Nota
• https://osv.dev/vulnerability/OESA-2026-2016 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-firebird3-cve-2025-65104-8.0 · Nota