CVE-2019-16536 | High | 8.8 | 2025-05-21 | Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3. |
CVE-2025-1386 | Medium | 4.9 | 2025-04-11 | When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker… |
CVE-2025-1385 | | | 2025-03-20 | When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a… |
CVE-2024-41436 | High | 7.5 | 2024-09-03 | ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl. |
CVE-2024-6873 | High | 8.1 | 2024-08-01 | It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request t… |
CVE-2024-22412 | Low | 2.4 | 2024-03-18 | ClickHouse is an open-source column-oriented database management system. A bug exists in the cloud ClickHouse offering prior to version 24.0.2.54535 and in git… |
CVE-2024-23689 | High | 8.8 | 2024-01-19 | Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions… |
CVE-2023-48704 | High | 7.0 | 2023-12-22 | ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow iss… |
CVE-2023-48298 | Medium | 5.9 | 2023-12-21 | ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an… |
CVE-2023-47118 | High | 7.0 | 2023-12-20 | ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow is… |
CVE-2022-44011 | Medium | 6.5 | 2023-11-23 | An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash th… |
CVE-2022-44010 | High | 7.5 | 2023-11-23 | An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endpoint (usually listening on port 8123 by… |
CVE-2021-43305 | High | 8.8 | 2022-03-14 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decomp… |
CVE-2021-43304 | High | 8.8 | 2022-03-14 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decomp… |
CVE-2021-42391 | Medium | 6.5 | 2022-03-14 | Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation… |
CVE-2021-42390 | Medium | 6.5 | 2022-03-14 | Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operat… |
CVE-2021-42389 | Medium | 6.5 | 2022-03-14 | Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation wi… |
CVE-2021-42388 | High | 8.1 | 2022-03-14 | Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user… |
CVE-2021-42387 | High | 8.1 | 2022-03-14 | Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user… |
CVE-2019-16535 | Critical | 9.8 | 2019-12-30 | In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via nati… |
CVE-2019-15024 | Medium | 6.5 | 2019-12-30 | In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a custom server available from the network wh… |
CVE-2019-18657 | Medium | 5.3 | 2019-10-31 | ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function. |
CVE-2018-14672 | Medium | 5.3 | 2019-08-15 | In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages. |
CVE-2018-14671 | Critical | 9.8 | 2019-08-15 | In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability. |
CVE-2018-14670 | Critical | 9.8 | 2019-08-15 | Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database. |
CVE-2018-14669 | High | 7.5 | 2019-08-15 | ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary fil… |
CVE-2018-14668 | High | 8.8 | 2019-08-15 | In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "default_database" fields which led to Cross Protoc… |