Advisories · Technology
ClickHouse.
Every CVE that names ClickHouse among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.5 CriticalCritical · CVSS 9+
Unauthenticated RCE vulnerability against ClickHouse Server
- ClickHouse
- ClickHouse Cloud
- Memory corruption
- CVSS 8.1 High
Specially crafted request could caused undefined behaviour which may lead to Remote Code Execution.
- ClickHouse
- Memory corruption
- CVSS 2.4 Low
ClickHouse's Role-based Access Control is bypassed when query caching is enabled.
- ClickHouse
- Broken access control
- CVSS 7.0 High
Unauthenticated heap buffer overflow in Gorrila codec decompression
- ClickHouse
- Memory corruption
- CVSS 5.9 Medium
Integer underflow leading to stack overflow in FPC codec decompression
- ClickHouse
- Memory corruption
- CVSS 7.0 High
Heap buffer overflow in T64 codec decompression
- ClickHouse
- Memory corruption
-
ClickHouse: In all versions of ClickHouse before 19.14.3…
- ClickHouse
-
ClickHouse: In all versions of ClickHouse before 19.14, an OOB read…
- ClickHouse
-
ClickHouse: In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path…
- ClickHouse
-
ClickHouse: In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the…
- ClickHouse
-
ClickHouse: ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE"…
- ClickHouse
-
ClickHouse: In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in…
- ClickHouse
-
ClickHouse: Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to…
- ClickHouse