CVE-2019-16535

CRITICAL

9.8

Beschreibung

In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/30/2019

Zuletzt geandert6/25/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

clickhouse:clickhouse

Schwachen (CWE)

CWE-125CWE-191CWE-787

Referenzen

https://clickhouse.yandex/docs/en/security_changelog/(browser-security@yandex-team.ru)

https://clickhouse.yandex/docs/en/security_changelog/(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.