https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 12:21:42 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-107349 <p>An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as &#34;-c=&#34;, makes the ignore_startup_parameters list lookup loop forever. Because PgBouncer serves all clients from a single process, this saturates a CPU core and makes PgBouncer unresponsive to all clients until the process is restarted.</p> <p>An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as &#34;-c=&#34;, makes the ignore_startup_parameters list lookup loop forever. Because PgBouncer serves all clients from a single process, this saturates a CPU core and makes PgBouncer unresponsive to all clients until the process is restarted.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107349 https://db.gcve.eu/vuln/ghsa-h8cj-p2h5-hm79 <p>An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as &#34;-c=&#34;, makes the ignore_startup_parameters list lookup loop forever. Because PgBouncer serves all clients from a single process, this saturates a CPU core and makes PgBouncer unresponsive to all clients until the process is restarted.</p> <p>An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as &#34;-c=&#34;, makes the ignore_startup_parameters list lookup loop forever. Because PgBouncer serves all clients from a single process, this saturates a CPU core and makes PgBouncer unresponsive to all clients until the process is restarted.</p> https://db.gcve.eu/vuln/ghsa-h8cj-p2h5-hm79 https://db.gcve.eu/vuln/msrc_cve-2026-107349 msrc_CVE-2026-107349 https://db.gcve.eu/vuln/msrc_cve-2026-107349 https://db.gcve.eu/vuln/rhsa-2026:83843 <p>pgbouncer: pgbouncer: Denial of Service via integer overflow in message buffer growth pgbouncer: pgbouncer: Denial of Service via empty parameter name in startup options pgbouncer: pgbouncer: Privilege escalation via secondary startup message during SCRAM authentication</p> <p>pgbouncer: pgbouncer: Denial of Service via integer overflow in message buffer growth pgbouncer: pgbouncer: Denial of Service via empty parameter name in startup options pgbouncer: pgbouncer: Privilege escalation via secondary startup message during SCRAM authentication</p> https://db.gcve.eu/vuln/rhsa-2026:83843