DeutschShown in its original language — a full translation is planned for a future version.
PgBouncer: Mehrere Schwachstellen
view advisory published 2026-05-10
Ein Angreifer kann mehrere Schwachstellen in PgBouncer ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher spezifizierte Angriffe durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-6667US | —OT elevated | — | ||
PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requ… | ||||
| CVE-2026-6666US | high7.5 | Exploit | ||
A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field. | ||||
| CVE-2026-6665US | critical9.8 | — | ||
The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend th… | ||||
| CVE-2026-6664US | — | Exploit | ||
An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBoun… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2026-05-10external
- GitHub Advisory Database vom 2026-05-10external
- GitHub Advisory Database vom 2026-05-10external
- GitHub Advisory Database vom 2026-05-10external
- PoC CVE-2026-6664 vom 2026-05-12external
- Microsoft Security Update Guide vom 2026-05-12external
- WID-SEC-W-2026-1445 - CSAF Versionself
- WID-SEC-2026-1445 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan