BIT-pgbouncer-2021-3672

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/pgbouncer/BIT-pgbouncer-2021-3672.json
JSON Data
https://api.test.osv.dev/v1/vulns/BIT-pgbouncer-2021-3672
Aliases
Published
2024-03-06T11:01:14.293Z
Modified
2024-03-06T11:25:28.861Z
Summary
[none]
Details

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

Database specific
{
    "cpes": [
        "cpe:2.3:a:pgbouncer:pgbouncer:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}
References

Affected packages

Bitnami / pgbouncer

Package

Name
pgbouncer
Purl
pkg:bitnami/pgbouncer

Severity

  • 5.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.17.0