Description
An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.
Published: 2023-11-23
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-46974 An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.
References
Link Providers
https://clickhouse.com cve-icon cve-icon
History

No history.

Subscriptions

Clickhouse Clickhouse
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-03T13:47:05.424Z

Reserved: 2022-10-29T00:00:00.000Z

Link: CVE-2022-44011

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-11-23T16:15:07.217

Modified: 2024-11-21T07:27:31.573

Link: CVE-2022-44011

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses