Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-7690

Высокий

ALT-PU-2022-7690: package clickhouse update to version 22.8.8.3-alt1

Источник
errata.altlinux.org
Дата публикации
14.11.2022
Дата обновления
14.11.2022
Устраненные уязвимости
2

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades clickhouse to version 22.8.8.3-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 7.5
altlinux
около 4 лет назад

ALT-PU-2022-7819: package `clickhouse` update to version 22.8.6.71-alt1

CVSS3: 6.5
ubuntu
почти 3 года назад

An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.

CVSS3: 6.5
nvd
почти 3 года назад

An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.

CVSS3: 6.5
debian
почти 3 года назад

An issue was discovered in ClickHouse before 22.9.1.2603. An authentic ...

CVSS3: 7.5
ubuntu
почти 3 года назад

An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endpoint (usually listening on port 8123 by default), causing a heap-based buffer overflow that crashes the process. This does not require authentication. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.