Debian/clickhouse: high 8.1
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from t
Action: Upgrade clickhouse to 18.16.1+ds-7.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 18.16.1+ds-7.3 | - |
Fixed versions
| 18.16.1+ds-7.3 |
Sources
published · modified · JSON