Skip to content
Threat Feed

Tag

Scram

1 brief RSS
high advisory

pgjdbc SCRAM Authentication CPU Exhaustion DoS

pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 authentication, where a malicious server can instruct the driver to perform SCRAM authentication with a very large iteration count, leading to CPU exhaustion.

postgresql/pgjdbc dos cpu_exhaustion pgjdbc scram authentication
2r 1t 1c