CVE-2021-43305

🗓️ 14 Mar 2022 00:00:00Reported by JFROGType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 185 Views

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query

Reporter	Title	Published	Views	Family All 33
attackerkb	CVE-2021-43305	14 Mar 202223:15	–	attackerkb
BDU FSTEC	LZ4 Compression Code Execution	18 Mar 202200:00	–	bdu_fstec
ClickHouse	CVE-2021-43305	18 Oct 202100:00	–	clickhouse
Circl	CVE-2021-43305	16 Mar 202214:30	–	circl
Tenable Nessus	ClickHouse < 21.10.2.15 Multiple Vulnerabilities	24 Feb 202500:00	–	nessus
Tenable Nessus	Debian dla-3176 : clickhouse-client - security update	9 Nov 202200:00	–	nessus
Tenable Nessus	Ubuntu 20.04 LTS : ClickHouse vulnerabilities (USN-6933-1)	31 Jul 202400:00	–	nessus
CNNVD	Yandex ClickHouse 缓冲区错误漏洞	14 Mar 202200:00	–	cnnvd
Cvelist	CVE-2021-43305	14 Mar 202200:00	–	cvelist
Debian	[SECURITY] [DLA 3176-1] clickhouse security update	4 Nov 202206:11	–	debian

NVD

Node

clickhouse clickhouseRange<21.10.2.15

Node

debian debian_linuxMatch10.0

[
  {
    "vendor": "yandex",
    "product": "clickhouse",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "21.10.2.15-stable",
        "versionType": "custom"
      }
    ]
  }
]