1225 matches found
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2022-27949 via apache-airflow (1.10.6)
apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2022-27949...
Debian dla-3176 : clickhouse-client - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3176 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3176-1 [email protected]...
Debian: Security Advisory (DLA-3176-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
clickhouse:codegen_select_fuzzer: Container-overflow in std::__1::shared_ptr<DB::ASTFunction> DB::makeASTFunction<std::__1::shared_ptr<D
Project: https://github.com/ClickHouse/ClickHouse.git Detailed Report: https://oss-fuzz.com/testcase?key=5496872961966080 Project: clickhouse Fuzzing Engine: libFuzzer Fuzz Target: codegenselectfuzzer Job Type: libfuzzerasanclickhouse Platform Id: linux Crash Type: Container-overflow READ 8 Crash...
[SECURITY] [DLA 3176-1] clickhouse security update
Debian LTS Advisory DLA-3176-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost November 03, 2022 https://wiki.debian.org/LTS Package : clickhouse Version : 18.16.1+ds-4+deb10u1 CVE ID : CVE-2021-42387 CVE-2021-42388 CVE-2021-43304 CVE-2021-43305 Debian Bug : 1008216...
cloud.testload:jmeter-clickhouse-listener (2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (0.0.1) +297 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (>=3.0.0-alpha, <=3.3.0)
org.apache.uima:uimaj-core MAVEN version =3.0.0-alpha, =3.11.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =0.0.1, =1.1.1, =0.0.1, =1.1.6 and more Source cves: CVE-2022-32287 Source advisory: OSV:GHSA-XGQR-5WQW-9FPV...
DLA-3176-1 clickhouse - security update
Bulletin has no description...
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2022-43985 via apache-airflow (1.10.6)
apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2022-43985...
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2022-43985 via apache-airflow (1.10.6)
apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2022-43985...
clickhouse:codegen_select_fuzzer: Heap-buffer-overflow in DB::PositionLayer::getResult
Project: https://github.com/ClickHouse/ClickHouse.git Detailed Report: https://oss-fuzz.com/testcase?key=6666233642876928 Project: clickhouse Fuzzing Engine: libFuzzer Fuzz Target: codegenselectfuzzer Job Type: libfuzzerasanclickhouse Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Cra...
clickhouse:lz4_decompress_fuzzer: Use-of-uninitialized-value in DB::ICompressionCodec::~ICompressionCodec
Project: https://github.com/ClickHouse/ClickHouse.git Detailed Report: https://oss-fuzz.com/testcase?key=6349126845726720 Project: clickhouse Fuzzing Engine: libFuzzer Fuzz Target: lz4decompressfuzzer Job Type: libfuzzermsanclickhouse Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...
clickhouse:codegen_select_fuzzer: Use-of-uninitialized-value in DB::IAST::~IAST
Project: https://github.com/ClickHouse/ClickHouse.git Detailed Report: https://oss-fuzz.com/testcase?key=4544949383462912 Project: clickhouse Fuzzing Engine: libFuzzer Fuzz Target: codegenselectfuzzer Job Type: libfuzzermsanclickhouse Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...
clickhouse:lz4_decompress_fuzzer: Heap-buffer-overflow in lz4_decompress_fuzzer
Project: https://github.com/ClickHouse/ClickHouse.git Detailed Report: https://oss-fuzz.com/testcase?key=6308134134349824 Project: clickhouse Fuzzing Engine: libFuzzer Fuzz Target: lz4decompressfuzzer Job Type: libfuzzerasanclickhouse Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8...
CVE-2022-39267
Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Versions prior to 1.8.8-release are subject to authentication bypass in the admin and monitor user groups by deleting the X-Requested-With:...
CVE-2022-39267
CVE-2022-39267 affects Bifrost, a middleware that synchronizes MySQL/MariaDB to Redis, MongoDB, ClickHouse, and other services. The vulnerability occurs in versions prior to 1.8.8-release, where an attacker can bypass authentication in the admin and monitor user groups by removing the X-Requested...
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2022-41672 via apache-airflow (1.10.6)
apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2022-41672...
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), dbnd-airflow (0.24.11) +1 more potentially affected by CVE-2022-41672 via apache-airflow (1.10.6)
apache-airflow PYPI version 1.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.5.1, =0.5.3 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24.11 Source cves: CVE-2022-41672...
airflow-add-ons (0.2.9b1), airflow-clickhouse-plugin (0.8.2) +3 more potentially affected by CVE-2022-40754 via apache-airflow (>=2.3.2, <=2.3.4)
apache-airflow PYPI version =2.3.2, =0.1.0, =0.1.0, =0.10.0.1 Source cves: CVE-2022-40754 Source advisory: GHSA-4FG5-J4MM-WFPG...
airflow-add-ons (0.2.9b1), airflow-clickhouse-plugin (0.8.2) +3 more potentially affected by CVE-2022-40754 via apache-airflow (>=2.3.2, <=2.3.4)
apache-airflow PYPI version =2.3.2, =0.1.0, =0.1.0, =0.10.0.1 Source cves: CVE-2022-40754 Source advisory: OSV:GHSA-4FG5-J4MM-WFPG...
PT-2022-27073 · Unknown +2 · Clickhouse +1
Name of the Vulnerable Software and Affected Versions: ClickHouse versions prior to 22.9.1.2603 ClickHouse versions prior to 22.8.2.11 ClickHouse versions prior to 22.7.4.16 ClickHouse versions prior to 22.6.6.16 ClickHouse versions prior to 22.3.12.19 Description: A heap-based buffer overflow...