263 matches found
PgBouncer 信任管理问题漏洞
PgBouncer is an open source lightweight connection pool for PostgreSql from the PgBouncer community. A vulnerability with trust management issues exists in PgBouncer. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker...
PT-2021-7397 · Pgbouncer +3 · Pgbouncer +3
Name of the Vulnerable Software and Affected Versions: PgBouncer versions prior to 1.16.1 Description: The issue is related to the handling of initial message request data in PgBouncer, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a...
The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.
...
PgBouncer Security Vulnerability
PgBouncer is a lightweight set of database connection pooling tools for PostgreSQL , it can provide a unified view of the links to the client . A security vulnerability exists in version 1.6.x of PgBouncer prior to 1.6.1. A remote attacker can exploit this vulnerability to gain login privileges...
CVE-2015-6817
PgBouncer 1.6.x before 1.6.1, when configured with authuser, allows remote attackers to gain login access as authuser via an unknown username...
CVE-2015-6817
PgBouncer 1.6.x before 1.6.1, when configured with authuser, allows remote attackers to gain login access as authuser via an unknown username...
DEBIAN-CVE-2015-6817
PgBouncer 1.6.x before 1.6.1, when configured with authuser, allows remote attackers to gain login access as authuser via an unknown username...
Null pointer dereference
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
Design/Logic Flaw
PgBouncer 1.6.x before 1.6.1, when configured with authuser, allows remote attackers to gain login access as authuser via an unknown username...
CVE-2015-6817
PgBouncer 1.6.x before 1.6.1, when configured with authuser, allows remote attackers to gain login access as authuser via an unknown username...
DEBIAN-CVE-2015-4054
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
CVE-2015-4054
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
UBUNTU-CVE-2015-4054
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
CVE-2015-4054
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
CVE-2015-4054
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
CVE-2015-4054
PgBouncer (PostgreSQL connection pooler) is vulnerable in versions prior to 1.5.5. The issue arises when a password packet is sent before a startup packet, enabling remote denial of service via a NULL pointer dereference and crash. The available connected documents confirm this behavior and indic...
CVE-2015-4054
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash by sending a password packet before a startup packet...
CVE-2015-6817
CVE-2015-6817 affects PgBouncer 1.6.x before 1.6.1. The vulnerability allows a remote attacker to gain login access as auth_user via an unknown username when configured with the auth_user feature. Public references in multiple databases (NVD, OSV, CNVD, Debian tracker, Gentoo GLSA) corroborate th...
