关键漏洞信息 漏洞标题 Non-authorized (without secret key) access to encrypted database using execute statement on external. 严重性 Severity: High (7.1/10) CVSS v3 base metrics: - Attack vector: Network - Attack complexity: High - Privileges required: Low - User interaction: None - Scope: Unchanged - Confidentiality: High - Integrity: High - Availability: Low 影响范围 Package: All firebird versions starting with 4.0.0. Affected versions: <= 4.0.7, <= 5.0.3 Patched versions: Equal or greater than: 6.0.0.609, 5.0.2.1610, 4.0.6.3183 描述与影响 Connections stored in ExtConnPool are not verified for presence and suitability of CryptCallback interface used when they were created vs actually available currently. Additional problem with vulnerability is that use of inappropriate CryptCallback interface may cause segfault in server process. To be impacted by this vulnerability one should use ExtConnPool (i.e. set to non-zero parameter ExtConnPoolSize in firebird.conf). Encrypted database, accessed by execute statement on external, may be accessed later by attachment missing a key to that database. In a case when execute statement are chained segfault may happen. What is worse that segfault may take place even for unencrypted databases. 修复措施 Currently one can use the following or later snapshots: - 6.0.0.609 - 5.0.2.1610 - 4.0.6.3183 or point releases: - 5.0.2 - 4.0.6 Present in them fix for #8429 also fixes this GHSA. 解决方案 Set in firebird.conf. This is default value - i.e. if you never tuned it you are not impacted. CVE ID CVE-2025-24975 弱点 No CWEs