586 matches found
CVE-2021-43305
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits. This issu...
CVE-2021-42388
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...
Yandex ClickHouse 缓冲区错误漏洞
Yandex ClickHouse is a set of open source columnar databases for online analytical processing from the Russian company Yandex. A buffer error vulnerability exists in Yandex ClickHouse, no information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor...
CVE-2021-42387
CVE-2021-42387 affects ClickHouse. It describes a heap out-of-bounds read in the LZ4 compression codec during parsing a malicious query: a 16-bit unsigned offset read in LZ4::decompressImpl() is used to determine the copy length without checking the upper bounds of the source, potentially causing...
Yandex ClickHouse 数字错误漏洞
Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...
CVE-2021-43304
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits...
Yandex ClickHouse 缓冲区错误漏洞
Yandex ClickHouse is a set of open source columnar databases for online analytical processing from the Russian company Yandex. Yandex ClickHouse suffers from a buffer error vulnerability that stems from a heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query...
Yandex ClickHouse 缓冲区错误漏洞
Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...
Yandex ClickHouse 数字错误漏洞
Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...
CVE-2021-43304
CVE-2021-43304 describes a heap-buffer overflow in ClickHouse’s LZ4 compression codec when parsing a malicious query. The root cause is the LZ4::decompressImpl loop, where the arbitrary copy operation wildCopy(op, ip, copy_end) can exceed the destination buffer’s bounds. This vulnerability is lin...
CVE-2021-43305
Summary : CVEs 2021-43304 and 2021-43305 describe heap/ buffer issues in ClickHouse’s LZ4 compression codec during parsing of crafted queries, due to unsafe copy bounds in LZ4::decompressImpl and the wildCopy function. The connected documents confirm a related set of advisories and mitigations ac...
CVE-2021-42387
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...
CVE-2021-42388
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...
Yandex ClickHouse 缓冲区错误漏洞
Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...
CVE-2021-42387
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...
Yandex ClickHouse 数字错误漏洞
Yandex ClickHouse is a set of open source columnar databases for online analytical processing from the Russian company Yandex. A numeric error vulnerability exists in Yandex ClickHouse, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor...
CVE-2021-43304
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits...
CVE-2021-42388
CVE-2021-42388 affects ClickHouse’s LZ4 compression codec. In LZ4::decompressImpl(), a 16-bit unsigned offset is read from the compressed data and later used to determine a copy length without lower-bound source checks, causing a heap out-of-bounds read. This could enable crashes or memory-access...
CVE-2021-43305
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits. This issu...
GHSA-3W6P-8F82-GW8R Using JMSAppender in log4j configuration may lead to deserialization of untrusted data
Impact ClickHouse JDBC Bridge uses slf4j-log4j12 1.7.32, which depends on log4j 1.2.17. It allows a remote attacker to execute code on the server, if you changed default log4j configuration by adding JMSAppender and an insecure JMS broker. Patches The patch version 2.0.7 removed log4j dependency ...