Поиск уязвимостей
Количество 9
Количество 9
ALT-PU-2019-3124
ALT-PU-2019-3124: package `clickhouse` update to version 19.16.2.2-alt1
CVE-2019-15024
In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a custom server available from the network where ClickHouse runs, can create a custom-built malicious server that will act as a ClickHouse replica and register it in ZooKeeper. When another replica will fetch data part from the malicious replica, it can force clickhouse-server to write to arbitrary path on filesystem.
GHSA-vv4f-6f99-x599
In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a custom server available from the network where ClickHouse runs, can create a custom-built malicious server that will act as a ClickHouse replica and register it in ZooKeeper. When another replica will fetch data part from the malicious replica, it can force clickhouse-server to write to arbitrary path on filesystem.
CVE-2019-16535
In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol.
CVE-2019-16536
Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.
CVE-2019-16536
Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.
CVE-2019-16536
Stack overflow leading to DoS can be triggered by a malicious authenti ...
GHSA-x3fg-74w9-f5r4
In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol.
GHSA-5xwv-wjhm-pv8f
Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2019-3124 ALT-PU-2019-3124: package `clickhouse` update to version 19.16.2.2-alt1 | CVSS3: 9.8 | почти 7 лет назад | |
 | CVE-2019-15024 In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a custom server available from the network where ClickHouse runs, can create a custom-built malicious server that will act as a ClickHouse replica and register it in ZooKeeper. When another replica will fetch data part from the malicious replica, it can force clickhouse-server to write to arbitrary path on filesystem. | CVSS3: 6.5 | 1% Низкий | почти 7 лет назад |
| GHSA-vv4f-6f99-x599 In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a custom server available from the network where ClickHouse runs, can create a custom-built malicious server that will act as a ClickHouse replica and register it in ZooKeeper. When another replica will fetch data part from the malicious replica, it can force clickhouse-server to write to arbitrary path on filesystem. | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
| CVE-2019-16535 In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol. | CVSS3: 9.8 | 2% Низкий | почти 7 лет назад |
 | CVE-2019-16536 Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3. | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
| CVE-2019-16536 Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3. | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
| CVE-2019-16536 Stack overflow leading to DoS can be triggered by a malicious authenti ... | CVSS3: 8.8 | 1% Низкий | больше 1 года назад |
| GHSA-x3fg-74w9-f5r4 In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol. | CVSS3: 9.8 | 2% Низкий | больше 4 лет назад |
| GHSA-5xwv-wjhm-pv8f Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3. | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу