Поиск уязвимостей
Количество 9
Количество 9
CVE-2026-6668
Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow.
CVE-2026-6668
Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow.
CVE-2026-6668
Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow.
CVE-2026-6668
Integer overflow causes an infinite loop in packet buffer growth in PgBouncer
CVE-2026-6668
Integer overflow in the packet buffer growth logic in PgBouncer throug ...
GHSA-r96c-7w9v-wrc8
Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow.
BDU:2026-15220
Уязвимость программного обеспечения для пула соединения в PostgreSQL PgBouncer, связанная с выполнением цикла с недоступным условием выхода («Бесконечный цикл»), позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2026-16528
ALT-PU-2026-16528: package `pgbouncer` update to version 1.26.0-alt1
ALT-PU-2026-16294
ALT-PU-2026-16294: package `pgbouncer` update to version 1.26.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-6668 Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow. | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-6668 Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow. | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-6668 Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow. | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-6668 Integer overflow causes an infinite loop in packet buffer growth in PgBouncer | CVSS3: 7.5 | 1% Низкий | около 1 месяца назад |
| CVE-2026-6668 Integer overflow in the packet buffer growth logic in PgBouncer throug ... | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
| GHSA-r96c-7w9v-wrc8 Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow. | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
 | BDU:2026-15220 Уязвимость программного обеспечения для пула соединения в PostgreSQL PgBouncer, связанная с выполнением цикла с недоступным условием выхода («Бесконечный цикл»), позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
| ALT-PU-2026-16528 ALT-PU-2026-16528: package `pgbouncer` update to version 1.26.0-alt1 | CVSS3: 7.5 | около 1 месяца назад | |
| ALT-PU-2026-16294 ALT-PU-2026-16294: package `pgbouncer` update to version 1.26.0-alt1 | CVSS3: 7.5 | около 1 месяца назад |
Уязвимостей на страницу