CVE-2015-4054

概要

参考情報

• openwall.com/lists/oss-security/2015/05/22/5 · Mailing List
• securityfocus.com/bid/74751 · Third Party Advisory
• pgbouncer/pgbouncer commit 74d6e5f · Patch
• pgbouncer/pgbouncer commit edab5be · Patch
• pgbouncer/pgbouncer · Exploit
• pgbouncer.github.io/changelog.html · Release Notes
• security.gentoo.org/glsa/201701-24 · Third Party Advisory

pgbouncer のその他の脆弱性

• CVE-2026-6667中 4.3PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the a…
• CVE-2026-6666高 7.5A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE fie…
• CVE-2026-6665緊急 9.8The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM clie…
• CVE-2026-6664高 7.5An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthen…
• CVE-2025-12819高 8.1Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQ…