Details
-
Bug
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Fixed
-
11.4, 11.8, 12.3, 13.0, 13.1
-
None
-
Related to performance
Description
caching_sha2_password does not limit the password length over a unix socket or TLS, so a client can send a very long password making the server to spend CPU and time to reject it