Поиск уязвимостей
Количество 6
Количество 6
CVE-2021-42387
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation.
CVE-2021-42387
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation.
CVE-2021-42387
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when par ...
GHSA-cf9g-639p-3wvv
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation.
ALT-PU-2022-1682
ALT-PU-2022-1682: package `clickhouse` update to version 22.3.3.44-alt1
ALT-PU-2022-1418
ALT-PU-2022-1418: package `clickhouse` update to version 22.2.3.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-42387 Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation. | CVSS3: 8.1 | 2% Низкий | больше 4 лет назад |
 | CVE-2021-42387 Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation. | CVSS3: 8.1 | 2% Низкий | больше 4 лет назад |
| CVE-2021-42387 Heap out-of-bounds read in Clickhouse's LZ4 compression codec when par ... | CVSS3: 8.1 | 2% Низкий | больше 4 лет назад |
| GHSA-cf9g-639p-3wvv Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation. | CVSS3: 8.1 | 2% Низкий | больше 4 лет назад |
| ALT-PU-2022-1682 ALT-PU-2022-1682: package `clickhouse` update to version 22.3.3.44-alt1 | CVSS3: 8.8 | больше 4 лет назад | |
| ALT-PU-2022-1418 ALT-PU-2022-1418: package `clickhouse` update to version 22.2.3.5-alt1 | CVSS3: 8.8 | больше 4 лет назад |
Уязвимостей на страницу