Pgpool-II vulnerabilities
4 known vulnerabilities in Pgpool-II from PgPool Global Development Group. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.7 High severity
Pgpool-II: NULL Pointer Dereference
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.
- 8.7 High severity
Pgpool-II: Out-of-bounds Write
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution.
- 9.3 Critical severity
Pgpool-II: Authentication Bypass by Primary Weakness
Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper
- 7.5 High severity
Pgpool-II: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved.