CVE-2026-6666

Mô tả

Tham khảo

• pgbouncer.org/changelog.html · Release Notes

Lỗ hổng khác của pgbouncer

• CVE-2026-6667TRUNG BÌNH 4.3PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the a…
• CVE-2026-6665NGHIÊM TRỌNG 9.8The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM clie…
• CVE-2026-6664CAO 7.5An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthen…
• CVE-2025-12819CAO 8.1Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQ…
• CVE-2025-2291NGHIÊM TRỌNG 9.8Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an atta…