UbuntuUSN-6933-1ClickHouse vulnerabilities
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
Releases
- Ubuntu 20.04 LTS
Packages
- clickhouse - column-oriented database system (cli client)
Details
It was discovered that ClickHouse incorrectly handled memory, leading to a
heap out-of-bounds data read. An attacker could possibly use this issue to
cause a denial of service, or leak sensitive information.
(CVE-2021-42387, CVE-2021-41388)
It was discovered that ClickHouse incorrectly handled memory, leading to a
heap-based buffer overflow. An attacker could possibly use this issue to
cause a denial of service, or execute arbitrary code. (CVE-2021-43305)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 20.04 | noarch | clickhouse-common | < 18.16.1+ds-7ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | clickhouse-client | < 18.16.1+ds-7ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | clickhouse-client-dbgsym | < 18.16.1+ds-7ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | clickhouse-common-dbgsym | < 18.16.1+ds-7ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | clickhouse-server | < 18.16.1+ds-7ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | clickhouse-server-dbgsym | < 18.16.1+ds-7ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | clickhouse-tools | < 18.16.1+ds-7ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | clickhouse-tools-dbgsym | < 18.16.1+ds-7ubuntu0.1 | UNKNOWN |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High