Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PgBouncer ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
PgBouncer ist ein leichtgewichtiger Connection-Pooler für PostgreSQL
Vulnerabilities 3
-
High 7.5
NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer
Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required va…
-
High 7.5
Integer overflow causes an infinite loop in packet buffer growth in PgBouncer
Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to termi…
-
Medium 5.9
Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer
Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in PgBouncer through 1.25.2 allows a malicious or compromised PostgreSQL backend to cause uncontrolled CPU consumption in PgBouncer. The resulti…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-85365, EUVD-2026-85364, EUVD-2026-85363
-
#1
Initiale Fassung
References
-
PgBouncer Release Notes vom 2026-09-22
https://www.pgbouncer.org/2026/09/pgbouncer-1-26-0