CVE-2026-6665: PgBouncer buffer overflow in SCRAM
PgBouncer buffer overflow in SCRAM
Other sources
The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6665?
CVE-2026-6665 is classified as a high-severity vulnerability due to its potential to cause a buffer overflow.
How do I fix CVE-2026-6665?
To mitigate CVE-2026-6665, upgrade PgBouncer to version 1.25.2 or later.
What are the potential impacts of CVE-2026-6665?
CVE-2026-6665 can lead to a stack overflow, which may allow an attacker to execute arbitrary code.
Which versions of PgBouncer are affected by CVE-2026-6665?
CVE-2026-6665 affects all versions of PgBouncer prior to 1.25.2.
What type of attack does CVE-2026-6665 enable?
CVE-2026-6665 enables a malicious backend to exploit the vulnerability by sending a specially crafted SCRAM server-final-message.