PgBouncer Integer Overflow Vulnerability in SCRAM Authentication Packet Parsing Leading to Denial-of-Service

A vulnerability exists in PgBouncer versions prior to 1.25.2, where an integer overflow in the network packet parsing code can bypass a boundary check, potentially leading to a crash. This issue allows an unauthenticated remote attacker to cause a denial-of-service by sending a malformed SCRAM authentication packet.

Impact

Exploitation of this vulnerability causes PgBouncer to crash, disrupting service.

Remediation

Users can upgrade to PgBouncer version 1.25.2 or later to address this vulnerability.