CVE-2012-5529: Null Pointer Dereference
Published Nov 20, 2012
·Updated
TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing an empty dynamic SQL query.
Affected Software
2 affected components
firebirdsql Firebird=2.5.0
firebirdsql Firebird=2.5.1
Event History
Nov 20, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5529?
CVE-2012-5529 has a severity rating that allows remote authenticated users to cause a denial of service.
2
How do I fix CVE-2012-5529?
To fix CVE-2012-5529, upgrade Firebird to version 2.5.2 or later.
3
Which versions of Firebird are affected by CVE-2012-5529?
CVE-2012-5529 affects Firebird versions 2.5.0 and 2.5.1.
4
What type of vulnerability is CVE-2012-5529?
CVE-2012-5529 is a denial of service vulnerability caused by a NULL pointer dereference.
5
Can CVE-2012-5529 be exploited by unauthenticated users?
No, CVE-2012-5529 can only be exploited by remote authenticated users.