Skip to main content

Firebird CVE-2012-5529

LOW
Resource Management Errors (CWE-399)
2012-11-20 secalert@redhat.com
3.5
CVSS 2.0 · NVD

Severity by source

NVD PRIMARY
3.5 LOW
AV:N/AC:M/Au:S/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
None
Availability
P

Lifecycle Timeline

1
CVE Published
Nov 20, 2012 - 00:55 cve.org
LOW 3.5

DescriptionCVE.org

TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing an empty dynamic SQL query.

AnalysisAI

TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing an empty dynamic SQL. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-399. TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing an empty dynamic SQL query. Affected products include: Firebirdsql Firebird.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2013-2492 MEDIUM POC
6.8 Mar 15

Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windo

CVE-2025-24975 HIGH POC
7.1 Aug 15

Firebird is a relational database. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. Public ex

CVE-2016-1569 MEDIUM POC
6.5 Jan 13

FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to

CVE-2026-40342 CRITICAL
9.9 Apr 17

Remote code execution in Firebird RDBMS versions prior to 5.0.4, 4.0.7, and 3.0.14 allows authenticated users with CREAT

CVE-2017-6369 HIGH
8.8 Mar 24

Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticate

CVE-2014-9323 MEDIUM POC
5.0 Dec 16

The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a de

CVE-2026-28224 HIGH
8.2 Apr 17

Null pointer dereference in Firebird SQL server causes remote denial-of-service when unauthenticated attackers send malf

CVE-2026-27890 HIGH
8.2 Apr 17

Remote denial-of-service in Firebird database server versions prior to 5.0.4, 4.0.7, and 3.0.14 allows unauthenticated n

CVE-2025-65104 HIGH
7.9 Apr 17

Information disclosure in Firebird 3.x client library when connecting to Firebird 4+ servers allows local authenticated

CVE-2026-35215 HIGH
7.5 Apr 17

Firebird database server crashes via crafted slice packet exploiting zero-length SDL descriptor validation flaw. Remote

CVE-2026-34232 HIGH
7.5 Apr 17

Remote denial-of-service in Firebird Database Server versions prior to 5.0.4, 4.0.7, and 3.0.14 allows unauthenticated n

CVE-2026-33337 HIGH
7.5 Apr 17

Buffer overflow in Firebird RDBMS allows remote unauthenticated attackers to crash database servers via malformed slice

Share

CVE-2012-5529 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy