NULL pointer dereference in Firebird - CVE-2025-54989

Vulnerability identifier: #VU114438

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-54989

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the parsing of XDR messages. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Firebird
Debian Linux
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
Fedora
SUSE Package Hub 15
openSUSE Leap
libfbclient2
libfbclient2-32bit
libfbclient2-32bit-debuginfo
libib_util-32bit-debuginfo
libib_util-32bit
firebird-doc
firebird
libib_util
libfbclient-devel
libfbclient2-debuginfo
firebird-server-debuginfo
libib_util-devel
firebird-utils
firebird-examples
firebird-debuginfo
firebird-server
firebird-debugsource
libib_util-debuginfo
firebird-utils-debuginfo
firebird4.0 (Debian package)

Install update from vendor's website.

Firebird - addressed in versions 3.0.13, 4.0.6, 5.0.3
libfbclient2 - update to 3.0.4.33054-150200.3.3.1
libfbclient2-32bit - update to 3.0.4.33054-150200.3.3.1
libfbclient2-32bit-debuginfo - update to 3.0.4.33054-150200.3.3.1
libib_util-32bit-debuginfo - update to 3.0.4.33054-150200.3.3.1
libib_util-32bit - update to 3.0.4.33054-150200.3.3.1
firebird-doc - update to 3.0.4.33054-150200.3.3.1
firebird - update to 3.0.4.33054-150200.3.3.1
libib_util - update to 3.0.4.33054-150200.3.3.1
libfbclient-devel - update to 3.0.4.33054-150200.3.3.1
libfbclient2-debuginfo - update to 3.0.4.33054-150200.3.3.1
firebird-server-debuginfo - update to 3.0.4.33054-150200.3.3.1
libib_util-devel - update to 3.0.4.33054-150200.3.3.1
firebird-utils - update to 3.0.4.33054-150200.3.3.1
firebird-examples - update to 3.0.4.33054-150200.3.3.1
firebird-debuginfo - update to 3.0.4.33054-150200.3.3.1
firebird-server - update to 3.0.4.33054-150200.3.3.1
firebird-debugsource - update to 3.0.4.33054-150200.3.3.1
libib_util-debuginfo - update to 3.0.4.33054-150200.3.3.1
firebird-utils-debuginfo - update to 3.0.4.33054-150200.3.3.1
firebird4.0 (Debian package) - update to 4.0.5.3140.ds6-17+deb13u1
firebird - addressed in versions 4.0.6.3221-1.fc41, 4.0.6.3221-1.fc42, 4.0.6.3221-1.fc43, 4.0.6.3221-1.1.el8, 4.0.6.3221-1.1.el9

• https://github.com/FirebirdSQL/firebird/commit/169da595f8693fc1a65a79c741724b1bc8db9f25
• https://github.com/FirebirdSQL/firebird/issues/8554
• https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-7qp6-hqxj-pjjp
• https://www.zerodayinitiative.com/advisories/ZDI-25-859/

• Denial of service in Firebird
• SUSE update for firebird
• Debian update for firebird4.0
• Fedora 42 update for firebird
• Fedora 41 update for firebird
• Fedora 43 update for firebird
• Fedora EPEL 8 update for firebird
• Fedora EPEL 9 update for firebird