pgbouncer vulnerabilities (Ubuntu)
13 vulnerabilities.
-
pgbouncerUbuntu Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer 8.8 High -
pgbouncerUbuntu Infinite loop on empty option name in startup options parameter in PgBouncer 7.5 High -
pgbouncerUbuntu Integer overflow causes an infinite loop in message buffer growth in PgBouncer 5.9 Medium -
pgbouncerUbuntu NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer 7.5 High -
pgbouncerUbuntu Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer 5.9 Medium -
pgbouncerUbuntu Integer overflow causes an infinite loop in packet buffer growth in PgBouncer 7.5 High -
pgbouncerUbuntu PgBouncer missing authorization check in KILL_CLIENT admin command 4.3 Medium -
pgbouncerUbuntu PgBouncer crash in kill_pool_logins_server_error 5.9 Medium -
pgbouncerUbuntu PgBouncer buffer overflow in SCRAM 8.1 High -
pgbouncerUbuntu PgBouncer integer overflow in PgBouncer network packet parsing 7.5 High -
pgbouncerUbuntu Untrusted search path in auth_query connection in PgBouncer 7.5 High -
pgbouncerUbuntu PgBouncer default auth_query does not take Postgres password expiry into account 8.1 High -
pgbouncerUbuntu When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can... 8.1 High