Threats tagged 'ghsa-mhmx-mjv6-w337'

A vulnerability in PgBouncer before version 1.25.2 involves incorrect checking of the return value of strlcat() in the SCRAM authentication code. This flaw can be exploited by a malicious backend sending a SCRAM server-final-message with a long nonce, potentially causing a stack overflow.