Поиск уязвимостей
Количество 34
Количество 34
ALT-PU-2026-7648
ALT-PU-2026-7648: package `pgbouncer` update to version 1.25.2-alt1
ALT-PU-2026-7562
ALT-PU-2026-7562: package `pgbouncer` update to version 1.25.2-alt1
CVE-2026-6664
An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.
CVE-2026-6664
An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.
CVE-2026-6664
PgBouncer integer overflow in PgBouncer network packet parsing
CVE-2026-6664
An integer overflow in network packet parsing code in PgBouncer before ...
GHSA-pmgp-q838-fh9g
An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.
BDU:2026-06724
Уязвимость функций mbuf_get_bytes() и mbuf_get_chars() программного обеспечения для пула соединения в PostgreSQL PgBouncer, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260713-80-0050
Уязвимость pgbouncer
ROS-20260713-73-0045
Уязвимость pgbouncer
CVE-2026-6665
The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow.
CVE-2026-6665
The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow.
CVE-2026-6665
PgBouncer buffer overflow in SCRAM
CVE-2026-6665
The SCRAM code in PgBouncer before 1.25.2 did not check the return val ...
GHSA-mhmx-mjv6-w337
The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow.
BDU:2026-06728
Уязвимость функции strlcat() программного обеспечения для пула соединения в PostgreSQL PgBouncer, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
ROS-20260714-80-0055
Уязвимость pgbouncer
ROS-20260714-73-0050
Уязвимость pgbouncer
CVE-2026-6667
PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.
CVE-2026-6667
PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-7648 ALT-PU-2026-7648: package `pgbouncer` update to version 1.25.2-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-7562 ALT-PU-2026-7562: package `pgbouncer` update to version 1.25.2-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
 | CVE-2026-6664 An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-6664 An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-6664 PgBouncer integer overflow in PgBouncer network packet parsing | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| CVE-2026-6664 An integer overflow in network packet parsing code in PgBouncer before ... | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
| GHSA-pmgp-q838-fh9g An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet. | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | BDU:2026-06724 Уязвимость функций mbuf_get_bytes() и mbuf_get_chars() программного обеспечения для пула соединения в PostgreSQL PgBouncer, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 6 месяцев назад |
 | ROS-20260713-80-0050 Уязвимость pgbouncer | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| ROS-20260713-73-0045 Уязвимость pgbouncer | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| CVE-2026-6665 The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow. | CVSS3: 9.8 | 0% Низкий | 6 месяцев назад |
| CVE-2026-6665 The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow. | CVSS3: 9.8 | 0% Низкий | 6 месяцев назад |
| CVE-2026-6665 PgBouncer buffer overflow in SCRAM | CVSS3: 8.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-6665 The SCRAM code in PgBouncer before 1.25.2 did not check the return val ... | CVSS3: 9.8 | 0% Низкий | 6 месяцев назад |
| GHSA-mhmx-mjv6-w337 The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow. | CVSS3: 8.1 | 0% Низкий | 6 месяцев назад |
| BDU:2026-06728 Уязвимость функции strlcat() программного обеспечения для пула соединения в PostgreSQL PgBouncer, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании | CVSS3: 8.1 | 0% Низкий | 6 месяцев назад |
| ROS-20260714-80-0055 Уязвимость pgbouncer | CVSS3: 8.1 | 0% Низкий | 4 месяца назад |
| ROS-20260714-73-0050 Уязвимость pgbouncer | CVSS3: 8.1 | 0% Низкий | 4 месяца назад |
| CVE-2026-6667 PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter. | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| CVE-2026-6667 PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter. | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу