Package · Ubuntu

pgbouncer

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.9

CVE-2026-6666 Public exploit

PgBouncer crash in kill_pool_logins_server_error

A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.

pgbouncer pgbouncer pgbouncer pgbouncer Debian Ubuntu Azure Linux Wolfi

May 9, 2026
High 7.5

CVE-2026-6664 Public exploit

PgBouncer integer overflow in PgBouncer network packet parsing

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.

pgbouncer pgbouncer pgbouncer pgbouncer Debian Ubuntu Azure Linux Wolfi

May 9, 2026