CVE-2012-4575: Pgbouncer Project Pgbouncer

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request.

Affected products

• Pgbouncer Project Pgbouncer: version 1.5.2 only

Published 2012-11-18. Last modified 2026-06-16.