Поиск уязвимостей
Количество 7
Количество 7
CVE-2021-43304
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits.
CVE-2021-43304
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits.
CVE-2021-43304
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsin ...
GHSA-4px5-4p3v-7568
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits.
BDU:2022-01316
Уязвимость кодека сжатия LZ4 системы управления базами данных ClickHouse OLAP, позволяющая нарушителю выполнить произвольный код
ALT-PU-2022-1682
ALT-PU-2022-1682: package `clickhouse` update to version 22.3.3.44-alt1
ALT-PU-2022-1418
ALT-PU-2022-1418: package `clickhouse` update to version 22.2.3.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-43304 Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits. | CVSS3: 8.8 | 2% Низкий | больше 4 лет назад |
 | CVE-2021-43304 Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits. | CVSS3: 8.8 | 2% Низкий | больше 4 лет назад |
| CVE-2021-43304 Heap buffer overflow in Clickhouse's LZ4 compression codec when parsin ... | CVSS3: 8.8 | 2% Низкий | больше 4 лет назад |
| GHSA-4px5-4p3v-7568 Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits. | CVSS3: 8.8 | 2% Низкий | больше 4 лет назад |
 | BDU:2022-01316 Уязвимость кодека сжатия LZ4 системы управления базами данных ClickHouse OLAP, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 2% Низкий | больше 4 лет назад |
| ALT-PU-2022-1682 ALT-PU-2022-1682: package `clickhouse` update to version 22.3.3.44-alt1 | CVSS3: 8.8 | больше 4 лет назад | |
| ALT-PU-2022-1418 ALT-PU-2022-1418: package `clickhouse` update to version 22.2.3.5-alt1 | CVSS3: 8.8 | больше 4 лет назад |
Уязвимостей на страницу