Skip to content
Threat Feed

Product

Postgresql/Pgjdbc (>= 42.2.0, < 42.7.11)

1 brief RSS
high advisory

pgjdbc SCRAM Authentication CPU Exhaustion DoS

pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 authentication, where a malicious server can instruct the driver to perform SCRAM authentication with a very large iteration count, leading to CPU exhaustion.

postgresql/pgjdbc dos cpu_exhaustion pgjdbc scram authentication
2r 1t 1c