CVE-2012-5529

Published: Nov 20, 2012Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing an empty dynamic SQL query.

Affected (2)

Products: Firebirdsql: Firebird

Firebirdsql

1 product

Firebird

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Firebirdsql Firebird	Version 2.5.0
Firebirdsql Firebird	Version 2.5.1

Related CWEs

CWE-399

References (14)

http://tracker.firebirdsql.org/browse/CORE-3884

Source: secalert@redhat.com

Vendor Advisory

http://www.debian.org/security/2013/dsa-2648

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/11/14/6

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/11/14/8

Source: secalert@redhat.com

http://www.securityfocus.com/bid/56521

Source: secalert@redhat.com

http://www.securitytracker.com/id?1027769

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/80073

Source: secalert@redhat.com

http://tracker.firebirdsql.org/browse/CORE-3884