https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:09:33 +0000 https://db.gcve.eu/vuln/bdu:2026-15220 bdu:2026-15220 https://db.gcve.eu/vuln/bdu:2026-15220 https://db.gcve.eu/vuln/fkie_cve-2026-6668 <p>Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow.</p> <p>Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow.</p> https://db.gcve.eu/vuln/fkie_cve-2026-6668 https://db.gcve.eu/vuln/ghsa-r96c-7w9v-wrc8 <p>Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow.</p> <p>Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow.</p> https://db.gcve.eu/vuln/ghsa-r96c-7w9v-wrc8 https://db.gcve.eu/vuln/msrc_cve-2026-6668 msrc_CVE-2026-6668 https://db.gcve.eu/vuln/msrc_cve-2026-6668 https://db.gcve.eu/vuln/rhsa-2026:70698 <p>pgbouncer: PgBouncer: Denial of Service via integer overflow in packet buffer growth pgbouncer: PgBouncer: Denial of Service via unbounded SCRAM iteration count pgbouncer: PgBouncer: Denial of Service via malformed SCRAM client-final-message</p> <p>pgbouncer: PgBouncer: Denial of Service via integer overflow in packet buffer growth pgbouncer: PgBouncer: Denial of Service via unbounded SCRAM iteration count pgbouncer: PgBouncer: Denial of Service via malformed SCRAM client-final-message</p> https://db.gcve.eu/vuln/rhsa-2026:70698 https://db.gcve.eu/vuln/ubuntu-cve-2026-6668 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pgbouncer, Ubuntu:18.04:LTS: pgbouncer, Ubuntu:20.04:LTS: pgbouncer, Ubuntu:22.04:LTS: pgbouncer, Ubuntu:24.04:LTS: pgbouncer, Ubuntu:26.04:LTS: pgbouncer</p> <p>Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pgbouncer, Ubuntu:18.04:LTS: pgbouncer, Ubuntu:20.04:LTS: pgbouncer, Ubuntu:22.04:LTS: pgbouncer, Ubuntu:24.04:LTS: pgbouncer, Ubuntu:26.04:LTS: pgbouncer</p> <p>Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is killed. Both unauthenticated and authenticated code paths can reach the overflow.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-6668