Firebird NULL Pointer Dereference Denial-of-Service Vulnerability in XDR Message Parsing

A denial-of-service vulnerability has been identified in Firebird relational database management system, prior to versions 3.0.13, 4.0.6, and 5.0.3. The issue arises from a NULL pointer dereference during the parsing of XDR messages from clients, leading to a crash or unresponsiveness of the database server.

Impact

Exploitation of this vulnerability causes a NULL pointer dereference, leading to a denial-of-service condition where the database server becomes unresponsive or crashes.

Remediation

Users can upgrade to Firebird versions 3.0.13, 4.0.6, or 5.0.3 to address this vulnerability.