262 matches found
bouncer-overflow
PgBouncer Crash PoC This repository contains a local proof of concept for a PgBouncer crash caused by an integer overflow in vulnerable PgBouncer versions. The included Docker setup builds PgBouncer 1.25.1, starts a PostgreSQL backend, enables SCRAM-SHA-256 authentication, and runs poc.py against...
Astra Linux – Vulnerability in pgbouncer
When PgBouncer is configured to use “cert” authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1...
Astra Linux – Vulnerability in pgbouncer
In PgBouncer, a password can be used after it has expired due to the fact that the authquery does not take into account Postgres’s VALID UNTIL value. This allows an attacker to log in with a password that is already expired...
CLEANSTART-2026-IY75033 Security fixes in pgbouncer 1.16.1-r0
Package pgbouncer version 1.16.1-r0 fixes 1 vulnerabilities: CVE-2021-3935...
CLEANSTART-2026-ES98761 Security fixes in pgbouncer 1.25.1-r0
Package pgbouncer version 1.25.1-r0 fixes 4 vulnerabilities: CVE-2026-6664, CVE-2026-6665, CVE-2026-6666, CVE-2026-6667...
ROS-20260714-73-0050
The vulnerability of the strlcat function in PostgreSQL PgBouncer software-related connectivity libraries is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...
ROS-20260713-73-0045
The vulnerability of the mbufgetbytes and mbufgetchars functions in PostgreSQL’s PgBouncer connection pool lies in integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted authentication packet called SCRAM...
May Linux Patch Wednesday
May Linux Patch Wednesday. A total of 1,638 vulnerabilities 474 in the Linux kernel. For comparison, in April there were 1,035 vulnerabilities a record!. And this time it turns out to be a record again, more than one and a half times higher! The acceleration is both impressive and alarming. But w...
GHSA-PMGP-Q838-FH9G vulnerabilities
Vulnerabilities for packages: pgbouncer...
CVE-2026-6664 vulnerabilities
Vulnerabilities for packages: pgbouncer...
GHSA-MHMX-MJV6-W337 vulnerabilities
Vulnerabilities for packages: pgbouncer...
CVE-2026-6667 vulnerabilities
Vulnerabilities for packages: pgbouncer...
CVE-2026-6666 vulnerabilities
Vulnerabilities for packages: pgbouncer...
GHSA-4463-8RVF-RJ9F vulnerabilities
Vulnerabilities for packages: pgbouncer...
CVE-2026-6665 vulnerabilities
Vulnerabilities for packages: pgbouncer...
GHSA-GC77-JRV9-6FJP vulnerabilities
Vulnerabilities for packages: pgbouncer...
CVE-2026-6666 vulnerabilities
Vulnerabilities for packages: pgbouncer...
GHSA-MHMX-MJV6-W337 vulnerabilities
Vulnerabilities for packages: pgbouncer...