Pgbouncer
6 CVEs across 1 Pgbouncer products. Browse Pgbouncer vulnerabilities, severities, and proof-of-concept exploits.
Pgbouncer products with known CVEs
Pgbouncer CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-6667 | Medium | 4.3 | 2026-05-09 | PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration conso… |
CVE-2026-6666 | Medium | 5.9 | 2026-05-09 | A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field. |
CVE-2026-6665 | High | 8.1 | 2026-05-09 | The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A… |
CVE-2026-6664 | High | 7.5 | 2026-05-09 | An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote atta… |
CVE-2025-12819 | High | 7.5 | 2025-12-03 | Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentica… |
CVE-2025-2291 | High | 8.1 | 2025-04-16 | Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with… |
CVE-2021-3672 | Medium | 5.6 | 2021-11-23 | A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong host… |
CVE-2021-3935 | High | 8.1 | 2021-11-22 | When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established… |
CVE-2015-6817 | High | 8.1 | 2017-05-23 | PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain login access as auth_user via an unknown username. |
CVE-2015-4054 | High | 7.5 | 2017-05-23 | PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by sending a password packet before a startup… |