Описание
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the lower bounds of the source of the copy operation.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/focal | released | 18.16.1+ds-7ubuntu0.1 |
| esm-apps/noble | not-affected | 18.16.1+ds-7.4build2 |
| focal | released | 18.16.1+ds-7ubuntu0.1 |
| impish | ignored | end of life |
| lunar | ignored | end of life, was needs-triage |
| mantic | ignored | end of life, was needs-triage |
| noble | not-affected | 18.16.1+ds-7.4build2 |
| upstream | released | 18.16.1+ds-7.4 |
Показывать по
Ссылки на источники
EPSS
5.5 Medium
CVSS2
8.1 High
CVSS3
Связанные уязвимости
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the lower bounds of the source of the copy operation.
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when par ...
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the lower bounds of the source of the copy operation.
EPSS
5.5 Medium
CVSS2
8.1 High
CVSS3