Arbitrary code execution in clickhouse-driver

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), baluchon (0.0.1) +4 more potentially affected by CVE-2020-26759 via clickhouse-driver (>=0.1.1, <=0.1.4)

clickhouse-driver PYPI version =0.1.1, =0.5.1, =0.0.4, =2.2.0, =2.3.2 Source cves: CVE-2020-26759 Source advisory: GHSA-VGV5-CXVH-VFXH...

GHSA-VGV5-CXVH-VFXH Arbitrary code execution in clickhouse-driver

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2021-26559 via apache-airflow (1.10.6)

apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2021-26559...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2021-26697 via apache-airflow (1.10.6)

apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2021-26697...

Server-Side Request Forgery (SSRF)

vrana/adminer is vulnerable to server-side request forgery SSRF. An attacker is able submit requests on behalf of the server via the error page of Elasticsearch and ClickHouse...

Mail.ru: [int.ucs.ru] Атаки на внутреннюю сеть UCS через СУБД Clickhouse

Some requests to clickhouse in ucs.ru were externally available potentially allowing SQL-like requests execution...

Arbitrary Code Execution

clickhouse-driver is vulnerable to arbitrary code execution. The vulnerability exists as it was possible to cause buffer overflow by suppling large values on the parameters which were Pyssizet typed...

CVE-2020-26759

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...

DEBIAN-CVE-2020-26759

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...

CVE-2020-26759

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), baluchon (0.0.1) +4 more potentially affected by CVE-2020-26759 via clickhouse-driver (>=0.1.1, <=0.1.4)

clickhouse-driver PYPI version =0.1.1, =0.5.1, =0.0.4, =2.2.0, =2.3.2 Source cves: CVE-2020-26759 Source advisory: OSV:PYSEC-2021-61...

PYSEC-2021-61

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...

UBUNTU-CVE-2020-26759

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...

PYSEC-2021-61

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...

CVE-2020-26759

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...

Buffer overflow

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), baluchon (0.0.1) +4 more potentially affected by CVE-2020-26759 via clickhouse-driver (>=0.1.1, <=0.1.4)

clickhouse-driver PYPI version =0.1.1, =0.5.1, =0.0.4, =2.2.0, =2.3.2 Source cves: CVE-2020-26759 Source advisory: MEND:CVE-2020-26759...

CVE-2020-26759

CVE-2020-26759 affects the Python clickhouse-driver prior to version 0.1.5. A crafted server response from a malicious ClickHouse server can trigger a buffer overflow on the client, leading to a crash or arbitrary code execution on the affected client. The vulnerability is described consistently ...

CVE-2020-26759

clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...