clickhouse:compressed_buffer_fuzzer: Heap-buffer-overflow in DB::CompressionCodecNone::doDecompressData

Project: https://github.com/ClickHouse/ClickHouse.git Detailed Report: https://oss-fuzz.com/testcase?key=5433699089383424 Project: clickhouse Fuzzing Engine: libFuzzer Fuzz Target: compressedbufferfuzzer Job Type: libfuzzerasanclickhouse Platform Id: linux Crash Type: Heap-buffer-overflow READ...

WS-2019-0375

In ClickHouse, v19.1.2-testing to v19.14.1.1177-testing there is a buffer overflow vulnerability in “CompressionCodecDelta::doDecompressData” function that copies data into a buffer without validating the length of the data. It could lead to a denial of service...