CVE-2023-41038

Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash when a user uses a specific form of SET BIND statement. Any non-privileged user with minimum access to a server may type a statement with a long `CHAR` length, which causes the server to crash due to stack corruption. Versions 4.0.4.2981 and 5.0.0.117 contain fixes for this issue. No known workarounds are available.

• CWE-770

• https://firebirdsql.org/en/snapshot-buildsProduct
• https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-6fv8-8rwr-9692Vendor Advisory
• https://firebirdsql.org/en/snapshot-buildsProduct
• https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-6fv8-8rwr-9692Vendor Advisory

Published

Mar 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41031Command injection in homemng.htm in Juplink RX4-1500 version…8.8
• CVE-2023-41032A vulnerability has been identified in Parasolid V34.1 (All …7.8
• CVE-2023-41033A vulnerability has been identified in Parasolid V35.0 (All …7.8
• CVE-2023-41034Eclipse Leshan is a device management server and client Java…9.8
• CVE-2023-41036Macvim is a text editor for MacOS. Prior to version 178, Mac…7.8
• CVE-2023-41037OpenPGP.js is a JavaScript implementation of the OpenPGP pro…4.3
• CVE-2023-41039RestrictedPython is a restricted execution environment for P…7.7
• CVE-2023-4104An invalid Polkit Authentication check and missing authentic…5.5
• CVE-2023-41040GitPython is a python library used to interact with Git repo…6.5
• CVE-2023-41041Graylog is a free and open log management platform. In a mul…3.1
• CVE-2023-41042Discourse is an open-source discussion platform. Prior to ve…6.5
• CVE-2023-41043Discourse is an open-source discussion platform. Prior to ve…6.5