CVE-2015-6817

概要

参考情報

• comments.gmane.org/gmane.comp.db.postgresql.pgbouncer.general/1251 · Mailing List
• openwall.com/lists/oss-security/2015/09/05/7 · Mailing List
• pgbouncer/pgbouncer commit 7ca3e52 · Patch
• pgbouncer/pgbouncer · Issue Tracking
• pgbouncer.github.io/2015/09/pgbouncer-1-6-1 · Patch
• security.gentoo.org/glsa/201701-24 · Third Party Advisory

pgbouncer のその他の脆弱性

• CVE-2026-6667中 4.3PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the a…
• CVE-2026-6666高 7.5A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE fie…
• CVE-2026-6665緊急 9.8The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM clie…
• CVE-2026-6664高 7.5An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthen…
• CVE-2025-12819高 8.1Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQ…