Skip to content
OpenAdvisories
High WID-SEC-2026-1445 4 CVEs

PgBouncer: Mehrere Schwachstellen

Published May 10, 2026 · Updated May 12, 2026 · Revision 3 · de-DE

Vendor: Microsoft Product: Azure Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in PgBouncer ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher spezifizierte Angriffe durchzuführen.

Product

PgBouncer ist ein leichtgewichtiger Connection-Pooler für PostgreSQL

Vulnerabilities 4

  • High 8.1
    CVE-2026-6665

    PgBouncer buffer overflow in SCRAM

    The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack ove…

    pgbouncer pgbouncer pgbouncer pgbouncer Debian Ubuntu Azure Linux Wolfi
  • High 7.5
    CVE-2026-6664 Public exploit

    PgBouncer integer overflow in PgBouncer network packet parsing

    An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.

    pgbouncer pgbouncer pgbouncer pgbouncer Debian Ubuntu Azure Linux Wolfi
  • Medium 5.9
    CVE-2026-6666 Public exploit

    PgBouncer crash in kill_pool_logins_server_error

    A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.

    pgbouncer pgbouncer pgbouncer pgbouncer Debian Ubuntu Azure Linux Wolfi
  • Medium 4.3
    CVE-2026-6667

    PgBouncer missing authorization check in KILL_CLIENT admin command

    PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow…

    pgbouncer pgbouncer pgbouncer pgbouncer Debian Ubuntu Azure Linux Wolfi

Revision history

  1. #3

    PoC für CVE-2026-6664 aufgenommen

  2. #2

    Neue Updates aufgenommen

  3. #1

    Initiale Fassung

References