CVE-2012-4575
The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote...
CVE-2012-4575 is a medium vulnerability (CVSS 5.0) in Pgbouncer Project Pgbouncer, published November 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.13%, the 81st percentile. Fixed in pgbouncer 1.5.2-4.
The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.
Exploit likelihood
What each source reports
NVD Score used
The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.
- Record
CVE-2012-4575- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.
- Record
CVE-2012-4575- Updated
- 2026-11-02
EUVDEUVD-2012-4501 No score
The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.
- Record
EUVD-2012-4501- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wcfv-hw89-j2wx No score
The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote...
The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.
- Record
GHSA-wcfv-hw89-j2wx- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.
- Record
CVE-2012-4575- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4575 No score
The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.
- Record
DEBIAN-CVE-2012-4575- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/56371
git.postgresql.org/gitweb?p=pgbouncer.git%3Ba=commit%3Bh=4b92112b820830b30cd7bc91bef3dd8f35305525
bugzilla.redhat.com/show_bug.cgi?id=872527
bugs.debian.org/cgi-bin/bugreport.cgi?bug=692103
openwall.com/lists/oss-security/2012/11/02/8
nvd.nist.gov/vuln/detail/CVE-2012-4575
github.com/advisories/GHSA-wcfv-hw89-j2wx
security-tracker.debian.org/tracker/CVE-2012-4575