Vulnerability in Firebirdsql Firebird

CVE-2012-5529

TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing an empty dynamic SQL query.

EPSS: 0.010 (77.0th percentile) — read the EPSS interpretation.

Affected products

Firebirdsql Firebird — versions 2.5.0, 2.5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

1027769 (vdb-entry, x_refsource_SECTRACK)
firebird-tracedsqlprepareprepare-dos(80073) (vdb-entry, x_refsource_XF)
56521 (vdb-entry, x_refsource_BID)
[oss-security] 20121114 CVE Request -- firebird: DoS (NULL pointer dereference) while preparing an empty query with trace enabled (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
DSA-2648 (vendor-advisory, x_refsource_DEBIAN)
[oss-security] 20121114 Re: CVE Request -- firebird: DoS (NULL pointer dereference) while preparing an empty query with trace enabled (mailing-list, x_refsource_MLIST)