vulnerability

SUSE: CVE-2025-54989: SUSE Linux Security Advisory

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Aug 27, 2025
Added
Dec 5, 2025
Modified
Dec 5, 2025

Description

Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL pointer dereference denial-of-service vulnerability in Firebird. This specific flaw exists within the parsing of xdr message from client. It leads to NULL pointer dereference and DoS. This issue has been patched in versions 3.0.13, 4.0.6, and 5.0.3.

Solutions

suse-upgrade-firebirdsuse-upgrade-firebird-docsuse-upgrade-firebird-examplessuse-upgrade-firebird-serversuse-upgrade-firebird-utilssuse-upgrade-libfbclient-develsuse-upgrade-libfbclient2suse-upgrade-libfbclient2-32bitsuse-upgrade-libib_utilsuse-upgrade-libib_util-32bitsuse-upgrade-libib_util-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.