Lucene search
+L

4 matches found

OSV
OSV
•added 2022/03/14 11:15 p.m.•5 views

DEBIAN-CVE-2021-43305

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits. This issu...

8.8CVSS8.7AI score0.01672EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•4 views

CVE-2021-43304: Heap-based Buffer Overflow

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy op, ip, copyend, don’t exceed the destination buffer’s limits...

8.8CVSS8.2AI score0.01672EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•4 views

CVE-2021-43305: Heap-based Buffer Overflow

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy op, ip, copyend, don’t exceed the destination buffer’s limits. This iss...

8.8CVSS8.2AI score0.01672EPSS
SaveExploits1References3
ClickHouse
ClickHouse
•added 2021/10/18 12:00 a.m.•22 views

CVE-2021-43305

Heap buffer overflow in ClickHouse’s LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend , don’t exceed the destination buffer’s limits. This iss...

8.8CVSS7.6AI score0.01672EPSS
SaveExploits1
Rows per page
Query Builder