Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-6817

Fixed in a distro release EPSS 2%

PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain login access as auth_user via an unknown username.

Published 2017-05-23 · CVE record · OSV

Products: pgbouncer

Distro releases

ReleasePackageFixed in
Debian 12pgbouncer1.6.1-1
Debian 13pgbouncer1.6.1-1
Debian 14pgbouncer1.6.1-1