143 matches found
CVE-2026-92869
A flaw was found in Pgpool-II. An out-of-bounds write vulnerability allows a remote authenticated attacker to cause a Denial of Service DoS by forcing the service to terminate unexpectedly. The issue occurs when the application attempts to write data beyond allocated memory buffer boundaries,...
CVE-2026-92868
A flaw was found in Pgpool-II due to improper certificate validation. A remote, unauthenticated attacker can exploit this issue to bypass client certificate authentication mechanisms. Successful exploitation may allow an attacker to gain unauthorized access to the database proxy service. Mitigati...
CVE-2026-92870
A flaw was found in Pgpool-II. Due to a stack-based buffer overflow, an unauthenticated remote attacker can trigger abnormal process termination by sending specially crafted input to the server. This issue leads to a Denial of Service DoS, making the service unavailable to legitimate users...
CVE-2026-92867
A flaw was found in Pgpool-II. An out-of-bounds write vulnerability allows an authenticated remote attacker to corrupt memory. This issue may enable the attacker to achieve arbitrary code execution or trigger an abnormal process crash, resulting in a denial of service DoS. Mitigation Disable the...
Linux Distros Unpatched Vulnerability : CVE-2026-92872
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information. CVE-2026-92872 Note that...
Linux Distros Unpatched Vulnerability : CVE-2026-92867
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-92871
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process...
Linux Distros Unpatched Vulnerability : CVE-2026-92873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node...
Linux Distros Unpatched Vulnerability : CVE-2026-92868
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...
Linux Distros Unpatched Vulnerability : CVE-2026-92870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination. CVE-2026-928...
Linux Distros Unpatched Vulnerability : CVE-2026-92869
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination. CVE-2026-92869 Note...
CVE-2026-92872
A flaw was found in Pgpool-II. The application writes sensitive cluster details directly into log files. An authenticated attacker can exploit this issue to view database cluster information, resulting in unauthorized information disclosure. Mitigation Mitigation for this issue is either not...
DEBIAN-CVE-2026-92871
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process...
DEBIAN-CVE-2026-92873
Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node...
DEBIAN-CVE-2026-92870
A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...
CVE-2026-92870
A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...
CVE-2026-92872
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information...
CVE-2026-92873
Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node...