Is Null Pointer Dereference affected by EUVD-2026-23462?

CVE-2026-28212 is a remote denial-of-service vulnerability in Firebird SQL affecting all maintained versions prior to 4.0.7, 5.0.4, and 6.0.0.

EUVD-2026-23462

| CVE-2026-28212 HIGH

2026-04-17 GitHub_M

Null Pointer Dereference Denial Of Service

7.5

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 17, 2026 - 19:22 vuln.today

cvss_changed

patch_available

Apr 17, 2026 - 19:16 EUVD

Analysis Generated

Apr 17, 2026 - 19:01 vuln.today

DescriptionNVD

Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an op_slice network packet, the server passes an unprepared structure containing a null pointer to the SDL_info() function, resulting in a null pointer dereference and server crash. An unauthenticated attacker can trigger this by sending a crafted packet to the server port. This issue has been fixed in versions 6.0.0, 5.0.4, 4.0.7 and 3.0.14.

AnalysisAI

Remote unauthenticated denial of service in Firebird SQL database server versions prior to 6.0.0/5.0.4/4.0.7/3.0.14 allows attackers to crash the database by sending a malformed op_slice network packet that triggers a null pointer dereference in the SDL_info() function. Attack requires only network access to the database port with no authentication (CVSS AV:N/AC:L/PR:N). …

RemediationAI

Within 24 hours: Identify all Firebird SQL instances in production and document current versions. Within 7 days: Upgrade to patched versions (3.0.14, 4.0.7, 5.0.4, or 6.0.0 depending on branch) or implement network segmentation to restrict database port access. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

EUVD-2026-23462 vulnerability details – vuln.today

Back

EUVD-2026-23462

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code