pgbouncer vulnerabilities (Debian)
16 vulnerabilities.
-
pgbouncerDebian Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer 8.8 High -
pgbouncerDebian Infinite loop on empty option name in startup options parameter in PgBouncer 7.5 High -
pgbouncerDebian Integer overflow causes an infinite loop in message buffer growth in PgBouncer 5.9 Medium -
pgbouncerDebian NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer 7.5 High -
pgbouncerDebian Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer 5.9 Medium -
pgbouncerDebian Integer overflow causes an infinite loop in packet buffer growth in PgBouncer 7.5 High -
pgbouncerDebian PgBouncer missing authorization check in KILL_CLIENT admin command 4.3 Medium -
pgbouncerDebian PgBouncer crash in kill_pool_logins_server_error 5.9 Medium -
pgbouncerDebian PgBouncer buffer overflow in SCRAM 8.1 High -
pgbouncerDebian PgBouncer integer overflow in PgBouncer network packet parsing 7.5 High -
pgbouncerDebian Untrusted search path in auth_query connection in PgBouncer 7.5 High -
pgbouncerDebian PgBouncer default auth_query does not take Postgres password expiry into account 8.1 High -
pgbouncerDebian When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can... 8.1 High -
pgbouncerDebian PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain... 8.1 High -
pgbouncerDebian PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer... 7.5 High -
pgbouncerDebian The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote... 5.0 Medium