Log in Start free

Vulnerability · Published Nov 22, 2021 · Assigned by fedora

CVE-2021-3935

High 8.1

In plain English

A high-severity SQL injection in pgbouncer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)8.1High
Exploit odds (30 days)1.1%top 33.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20pgbouncer1.16.1-r0ALPINE-CVE-2021-3935
Alpine:v3.21pgbouncer1.16.1-r0ALPINE-CVE-2021-3935
Alpine:v3.22pgbouncer1.16.1-r0ALPINE-CVE-2021-3935
Alpine:v3.23pgbouncer1.16.1-r0ALPINE-CVE-2021-3935
Alpine:v3.24pgbouncer1.16.1-r0ALPINE-CVE-2021-3935
Debian:12pgbouncer1.16.1-1DEBIAN-CVE-2021-3935
Debian:13pgbouncer1.16.1-1DEBIAN-CVE-2021-3935
Debian:14pgbouncer1.16.1-1DEBIAN-CVE-2021-3935
Ubuntu:22.04:LTSpgbouncerno fix listedUBUNTU-CVE-2021-3935

Affected products (as reported)

VendorProductVersions
n/a pgbouncer PgBouncer 1.16.1

Weakness: CWE-89

References