Advisories · Technology
PgBouncer.
Every CVE that names PgBouncer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer
- PgBouncer
- Authentication bypass
- CVSS 7.5 High
Infinite loop on empty option name in startup options parameter in PgBouncer
- PgBouncer
- Denial of service
- CVSS 5.9 Medium
Integer overflow causes an infinite loop in message buffer growth in PgBouncer
- PgBouncer
- Memory corruption
- Denial of service
- CVSS 7.5 High
NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer
- PgBouncer
- Memory corruption
- CVSS 5.9 Medium
Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer
- PgBouncer
- Denial of service
- CVSS 7.5 High
Integer overflow causes an infinite loop in packet buffer growth in PgBouncer
- PgBouncer
- Memory corruption
- Denial of service
- CVSS 4.3 Medium
PgBouncer missing authorization check in KILL_CLIENT admin command
- PgBouncer
- Broken access control
- CVSS 5.9 Medium
PgBouncer crash in kill_pool_logins_server_error
- PgBouncer
- Memory corruption
- CVSS 8.1 High
PgBouncer buffer overflow in SCRAM
- PgBouncer
- Memory corruption
- CVSS 7.5 High
PgBouncer integer overflow in PgBouncer network packet parsing
- PgBouncer
- Memory corruption
- CVSS 7.5 High
Untrusted search path in auth_query connection in PgBouncer
- PgBouncer
- CWE-426
- CVSS 8.1 High
PgBouncer default auth_query does not take Postgres password expiry into account
- PgBouncer
- CWE-324
-
SQL injection in pgbouncer
- pgbouncer
- SQL injection