Vulnerabilidades de postgresql postgresql jdbc driver (CVE)

Registros CVE publicados para postgresql postgresql jdbc driver, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
7.5Alta
CVE-2026-42198

pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS

pgjdbc pgjdbc; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1; Red Hat Red Hat build of Quarkus 3.27.3.SP2

pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 authentication. A malicious server can instruct the driver to perform SCRAM authentica…

3.3%EPSS