Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PgBouncer ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder Adminrechte zu erlangen.
Product
PgBouncer ist ein leichtgewichtiger Connection-Pooler für PostgreSQL
Vulnerabilities 3
-
High 8.8
Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer
Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A seco…
-
High 7.5
Infinite loop on empty option name in startup options parameter in PgBouncer
An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as "-c=", makes the ignore_startup_parameters list look…
-
Medium 5.9
Integer overflow causes an infinite loop in message buffer growth in PgBouncer
Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_packet_size is configured above 2147483648. A packet header declaring a length above 2^31 ma…
Revision history
-
#3
Neue Updates von Red Hat aufgenommen
-
#2
Referenz(en) aufgenommen: EUVD-2026-101500, EUVD-2026-101499, EUVD-2026-101498
-
#1
Initiale Fassung
References
-
PgBouncer Release Notes vom 2026-10-13
https://www.pgbouncer.org/2026/10/pgbouncer-1-26-1
-
Red Hat Security Advisory RHSA-2026:83843 vom 2026-10-17
https://access.redhat.com/errata/RHSA-2026:83843