Debian/clickhouse: high 8.8
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrar
Action: Upgrade clickhouse to 18.16.1+ds-7.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 18.16.1+ds-7.3 | - |
Fixed versions
| 18.16.1+ds-7.3 |
Sources
published · modified · JSON