BIT-PGBOUNCER-2021-3935

When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1...

Critical Photon OS Security Update - PHSA-2023-5.0-0140

Updates of 'pgbouncer', 'memcached' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0140

Updates of 'pgbouncer', 'memcached' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-0533

Updates of 'libtasn1', 'go', 'pgbouncer', 'curl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-3.0-0473

Updates of 'pgbouncer' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0267

Updates of 'pgbouncer', 'openssl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-0267

Updates of 'pgbouncer', 'openssl' packages of Photon OS have been released...

The vulnerability of the PgBouncer connection pool program in PostgreSQL allows for unauthorized access to sensitive data. By not properly securing the SQL query structure, attackers can gain access to confidential information, compromise its integrity, and cause service failures.

The vulnerability of the PostgreSQL PgBouncer connection pool program lies in the fact that the data received from the initial request message is treated as already decoded data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity,...

Malicious code in helium-pgbouncer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a35918caba67fee06e074a8eb6c66a80bc8b1aa2d443215ce191780d50dc453d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3590 Malicious code in helium-pgbouncer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a35918caba67fee06e074a8eb6c66a80bc8b1aa2d443215ce191780d50dc453d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Debian: Security Advisory (DLA-2922-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2922-1] pgbouncer security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2922-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 14, 2022 https://wiki.debian.org/LTS -...

DLA-2922-1 pgbouncer - security update

Bulletin has no description...

Debian DLA-2922-1 : pgbouncer - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2922 advisory. It was found that PgBouncer, a PostgreSQL connection pooler, was susceptible to an arbitrary SQL injection attack if a man-in-the-middle could inject data when a connection...

Fedora: Security Advisory for pgbouncer (FEDORA-2021-761cda0b77)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: pgbouncer-1.16.1-1.fc35

pgbouncer is a lightweight connection pooler for PostgreSQL and uses libevent for low-level socket handling...

CVE-2021-3935 affecting package pgbouncer 1.11.0-2

CVE-2021-3935 affecting package pgbouncer 1.11.0-2. An upgraded version of the package is available that resolves this issue...

Man-in-the-Middle Attack

pgbouncer:sid is vulnerable to man-in-the-middle attack. When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption...

When PgBouncer is configured to use "cert" authentication a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1.

...

CVE-2021-3935

When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1...