CVE-2015-2788
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird...
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.
- Record
CVE-2015-2788- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.
- Record
CVE-2015-2788- Updated
- 2026-11-02
EUVDEUVD-2015-2877 No score
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.
- Record
EUVD-2015-2877- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g3xf-fc3r-hm24 No score
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird...
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.
- Record
GHSA-g3xf-fc3r-hm24- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.
- Record
CVE-2015-2788- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-2788 No score
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.
- Record
DEBIAN-CVE-2015-2788- Updated
- 2026-11-02
OSVMGASA-2015-0159 No score
Updated perl-DBD-Firebird packages fix CVE-2015-2788
Updated perl-DBD-Firebird packages fix security vulnerability:
Stefan Roas discovered a way to cause a buffer overflow in DBD::FireBird in certain error conditions, due to the use of the sprintf() function to write to a fixed-size memory buffer (CVE-2015-2788).
- Record
MGASA-2015-0159- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-2788 No score
Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.
- Record
UBUNTU-CVE-2015-2788- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libdbd-firebird-perlDebian:12 |
before 1.18-2 | 1.18-2 |
libdbd-firebird-perlDebian:13 |
before 1.18-2 | 1.18-2 |
libdbd-firebird-perlDebian:14 |
before 1.18-2 | 1.18-2 |
libdbd-firebird-perlDebian:7 |
before 0.91-2+deb7u1, plus listed versions 0.91-2 |
0.91-2+deb7u1 |
perl-DBD-FirebirdMageia:4 |
before 1.150.0-2.1.mga4 | 1.150.0-2.1.mga4 |
libdbd-firebird-perlUbuntu:16.04:LTS |
before 1.18-2 | 1.18-2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-2788 is a high vulnerability (CVSS 10.0) in Debian Dbd-firebird, published April 11, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.22%, the 91st percentile. Fixed in libdbd-firebird-perl 1.18-2.