Yandex Clickhouse
7 CVEs affecting Yandex Clickhouse. Latest disclosed: 2022-03-14. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43305 | High | 8.8 | 2022-03-14 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decomp… |
CVE-2021-43304 | High | 8.8 | 2022-03-14 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decomp… |
CVE-2021-42388 | High | 8.1 | 2022-03-14 | Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user… |
CVE-2021-42387 | High | 8.1 | 2022-03-14 | Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user… |
CVE-2021-42391 | Medium | 6.5 | 2022-03-14 | Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation… |
CVE-2021-42390 | Medium | 6.5 | 2022-03-14 | Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operat… |
CVE-2021-42389 | Medium | 6.5 | 2022-03-14 | Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation wi… |