581 matches found
PT-2021-6811 · Yandex +1 · Yandex Browser +1
Name of the Vulnerable Software and Affected Versions: ClickHouse versions prior to v20.8.18.32-lts ClickHouse versions prior to v21.1.9.41-stable ClickHouse versions prior to v21.2.9.41-stable ClickHouse versions prior to v21.3.6.55-lts ClickHouse versions prior to v21.4.3.21-stable Yandex Brows...
Arbitrary code execution in clickhouse-driver
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
GHSA-VGV5-CXVH-VFXH Arbitrary code execution in clickhouse-driver
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
Server-Side Request Forgery (SSRF)
vrana/adminer is vulnerable to server-side request forgery SSRF. An attacker is able submit requests on behalf of the server via the error page of Elasticsearch and ClickHouse...
Mail.ru: [int.ucs.ru] Атаки на внутреннюю сеть UCS через СУБД Clickhouse
Some requests to clickhouse in ucs.ru were externally available potentially allowing SQL-like requests execution...
Arbitrary Code Execution
clickhouse-driver is vulnerable to arbitrary code execution. The vulnerability exists as it was possible to cause buffer overflow by suppling large values on the parameters which were Pyssizet typed...
CVE-2020-26759
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
DEBIAN-CVE-2020-26759
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
CVE-2020-26759
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
CVE-2020-26759
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
UBUNTU-CVE-2020-26759
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
PYSEC-2021-61
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
Buffer overflow
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
PYSEC-2021-61
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
CVE-2020-26759
CVE-2020-26759 affects the Python clickhouse-driver prior to version 0.1.5. A crafted server response from a malicious ClickHouse server can trigger a buffer overflow on the client, leading to a crash or arbitrary code execution on the affected client. The vulnerability is described consistently ...
CVE-2020-26759
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
CVE-2020-26759
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
Mymarilyn Clickhouse Driver Security Vulnerability
Mymarilyn Clickhouse Driver is a software from the Russian company Mymarilyn for supporting Python communication with ClickHouse servers. A security vulnerability exists in clickhouse-driver versions prior to 0.1.5, which is caused by a buffer overflow that triggers a crash or execution of...
PT-2021-11268 · Unknown +1 · Clickhouse-Driver +1
Name of the Vulnerable Software and Affected Versions: clickhouse-driver versions prior to 0.1.5 Description: The issue allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow. Recommendations:...