8.1
Élevée
CVE-2026-6665 The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the…
Description
The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| pgbouncer 1.25 | premières → < 1.25.2 | 1.25.2 |
Références
- www.pgbouncer.org www.pgbouncer.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de pgbouncer
Les 13 CVE de pgbouncer →
CVE-2026-107350
Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user…
8.8
Élevée
CVE-2026-107349
An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of…
7.5
Élevée
CVE-2026-107348
Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a…
5.9
Moyenne
CVE-2026-19888
Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2…
7.5
Élevée