Описание
A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| pgbouncer | fixed | 1.25.2-1 | package | |
| pgbouncer | fixed | 1.24.1-1+deb13u2 | trixie | package |
| pgbouncer | no-dsa | bookworm | package | |
| pgbouncer | postponed | bullseye | package |
Примечания
Fixed by: https://github.com/pgbouncer/pgbouncer/commit/0564f937c0fd81378d67ddcb57b0c00abc0b0f8f (pgbouncer_1_25_2)
EPSS
Связанные уязвимости
A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.
A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.
A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.
Уязвимость программного обеспечения для пула соединения в PostgreSQL PgBouncer, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании
EPSS