Bug 2543816 (CVE-2026-92869)

Summary: CVE-2026-92869 pgpool-II: pgpool-II: Denial of Service via out-of-bounds write
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in Pgpool-II. An out-of-bounds write vulnerability allows a remote authenticated attacker to cause a Denial of Service (DoS) by forcing the service to terminate unexpectedly. The issue occurs when the application attempts to write data beyond allocated memory buffer boundaries, resulting in an abnormal process crash.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2544636    
Bug Blocks:    

Description OSIDB Bzimport 2026-09-30 07:45:23 UTC 
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination.