Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pmgp-q838-fh9g

Опубликовано: 09 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.

EPSS

Процентиль: 49%
0.00698
Низкий

7.5 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.5
ubuntu
3 месяца назад

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.

CVSS3: 7.5
nvd
3 месяца назад

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.

CVSS3: 7.5
msrc
3 месяца назад

PgBouncer integer overflow in PgBouncer network packet parsing

CVSS3: 7.5
debian
3 месяца назад

An integer overflow in network packet parsing code in PgBouncer before ...

CVSS3: 7.5
fstec
3 месяца назад

Уязвимость функций mbuf_get_bytes() и mbuf_get_chars() программного обеспечения для пула соединения в PostgreSQL PgBouncer, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 49%
0.00698
Низкий

7.5 High

CVSS3

Дефекты

CWE-190