CVE-2021-3935
22.11.2021, 16:15
When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1.
| Vendor | Product | Version |
|---|---|---|
| pgbouncer | pgbouncer | 𝑥 < 1.16.1 |
| redhat | enterprise_linux | 7.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.
- CWE-295 - Improper Certificate ValidationThe software does not validate, or incorrectly validates, a certificate.
References