Launchpad.net

CVE 2015-4054

PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by sending a password packet before a startup packet.

See the CVE page on Mitre.org for more details.