CVE-2023-41038

Summary

CVE-2023-41038 is a server crash vulnerability affecting Firebird database versions 4.0.0 through 4.0.3 and 5.0 beta1. A non-privileged user can exploit this issue by using a maliciously crafted SET BIND statement with an abnormally long `CHAR` length. The vulnerability results in stack corruption and server crashes. Versions 4.0.4.2981 and 5.0.0.117 have been released to address the issue, and currently, no workarounds are available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.