Skip to content
OpenAdvisories

Package · Debian

pgbouncer

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-6666 Public exploit

    PgBouncer crash in kill_pool_logins_server_error

    A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.

    pgbouncer pgbouncer Debian Ubuntu
  • High 7.5
    CVE-2026-6664 Public exploit

    PgBouncer integer overflow in PgBouncer network packet parsing

    An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.

    pgbouncer pgbouncer Debian Ubuntu