CVE-2021-42390

Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0...

CVE-2021-42390

Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0...

CVE-2021-42389

Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0...

CVE-2021-42389

CVE-2021-42389 affects ClickHouse’s Delta compression codec. The vulnerability is a divide-by-zero: during parsing a malicious query, the first byte of the compressed buffer is used in a modulo operation without checking for 0. The issue is tied to the Delta codec, as described in multiple source...

CVE-2021-42389

Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0...

CVE-2021-42389

Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0...

Yandex ClickHouse buffer error vulnerability

Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...

CVE-2021-42387

CVE-2021-42387 affects ClickHouse. It describes a heap out-of-bounds read in the LZ4 compression codec during parsing a malicious query: a 16-bit unsigned offset read in LZ4::decompressImpl() is used to determine the copy length without checking the upper bounds of the source, potentially causing...

Yandex ClickHouse buffer error vulnerability

Yandex ClickHouse is a set of open source columnar databases for online analytical processing from the Russian company Yandex. A buffer error vulnerability exists in Yandex ClickHouse, no information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor...

CVE-2021-43304: Heap-based Buffer Overflow

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy op, ip, copyend, don’t exceed the destination buffer’s limits...

Yandex ClickHouse numerical error vulnerability

Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...

CVE-2021-42390: Divide By Zero

Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0...

Yandex ClickHouse numerical error vulnerability

Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...

CVE-2021-43304

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits...

CVE-2021-43304

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits...

CVE-2021-43305

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits. This issu...

CVE-2021-43305

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits. This issu...

CVE-2021-42387

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...

CVE-2021-42387

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...

CVE-2021-42388: Out-of-bounds Read

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...