tocsin

Debian/pgbouncer: unknown

The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.

Action: Upgrade pgbouncer to 1.5.2-4 or later.

Affected

introducedfixedlast affected
01.5.2-4-

Fixed versions

1.5.2-4

Sources

published · modified · JSON