Lucene search
K

[SECURITY] [DLA 3176-1] clickhouse security update

🗓️ 04 Nov 2022 06:11:35Reported by DebianType 
debian
 debian
🔗 lists.debian.org👁 29 Views

Vulnerabilities in ClickHouse requiring authentication, can be triggered by any user with read permissions, allowing attacker to crash server, leak memory, or achieve remote code execution. Fixed in version 18.16.1+ds-4+deb10u1

Related
Packages
ReporterTitlePublishedViews
Family
ClickHouse
Fixed in ClickHouse 21.10.2.15, 2021-10-18 
18 Oct 202100:00
clickhouse
ClickHouse
CVE-2021-42387
18 Oct 202100:00
clickhouse
ClickHouse
CVE-2021-42388
18 Oct 202100:00
clickhouse
ClickHouse
CVE-2021-43304
18 Oct 202100:00
clickhouse
ClickHouse
CVE-2021-43305
18 Oct 202100:00
clickhouse
Circl
CVE-2021-42387
16 Mar 202214:30
circl
Circl
CVE-2021-42388
16 Mar 202214:30
circl
Circl
CVE-2021-43304
16 Mar 202214:30
circl
Circl
CVE-2021-43305
16 Mar 202214:30
circl
Tenable Nessus
ClickHouse < 21.10.2.15 Multiple Vulnerabilities
24 Feb 202500:00
nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Debian10anyclickhouse18.16.1+ds-4+deb10u1clickhouse_18.16.1+ds-4+deb10u1_any.deb
Debian10amd64clickhouse-client18.16.1+ds-4+deb10u1clickhouse-client_18.16.1+ds-4+deb10u1_amd64.deb
Debian10amd64clickhouse-client-dbgsym18.16.1+ds-4+deb10u1clickhouse-client-dbgsym_18.16.1+ds-4+deb10u1_amd64.deb
Debian10amd64clickhouse-common18.16.1+ds-4+deb10u1clickhouse-common_18.16.1+ds-4+deb10u1_amd64.deb
Debian10amd64clickhouse-common-dbgsym18.16.1+ds-4+deb10u1clickhouse-common-dbgsym_18.16.1+ds-4+deb10u1_amd64.deb
Debian10amd64clickhouse-server18.16.1+ds-4+deb10u1clickhouse-server_18.16.1+ds-4+deb10u1_amd64.deb
Debian10amd64clickhouse-server-dbgsym18.16.1+ds-4+deb10u1clickhouse-server-dbgsym_18.16.1+ds-4+deb10u1_amd64.deb
Debian10amd64clickhouse-tools18.16.1+ds-4+deb10u1clickhouse-tools_18.16.1+ds-4+deb10u1_amd64.deb
Debian10amd64clickhouse-tools-dbgsym18.16.1+ds-4+deb10u1clickhouse-tools-dbgsym_18.16.1+ds-4+deb10u1_amd64.deb

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation