Clickhouse
Approved changes feed: RSS · Atom
cpe:2.3:a:yandex:clickhouse:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Yandex (694d67c2-958c-56da-ba5e-25307fedecef) |
|---|---|
| Product | Clickhouse (9ce99c52-4cdb-5926-b67b-844bdac759d9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/clickhouse |
purl2cpe | 2026-06-01 10:12:07.575374 |
pkg:deb/ubuntu/clickhouse |
purl2cpe | 2026-06-01 10:12:07.575376 |
pkg:github/clickhouse/clickhouse |
purl2cpe | 2026-06-01 10:12:07.575378 |
pkg:sourceforge/clickhouse.mirror |
purl2cpe | 2026-06-01 10:12:07.575379 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43305 |
vulnerable | 2026-06-08 05:36:43.125884 |
Details available
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits. This issue is very similar to CVE-2021-43304, but the vulnerable copy operation is in a different wildCopy call.
Published: 2022-03-14T00:00:00.000Z
Updated: 2024-08-04T03:55:29.085Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43304 |
vulnerable | 2026-06-08 05:36:43.123789 |
Details available
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits.
Published: 2022-03-14T00:00:00.000Z
Updated: 2024-08-04T03:55:28.381Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42391 |
vulnerable | 2026-06-08 05:35:22.265349 |
Details available
Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
Published: 2022-03-14T22:20:33.000Z
Updated: 2024-08-04T03:30:38.353Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42390 |
vulnerable | 2026-06-08 05:35:22.264823 |
Details available
Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
Published: 2022-03-14T22:20:31.000Z
Updated: 2024-08-04T03:30:38.448Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42389 |
vulnerable | 2026-06-08 05:35:22.264383 |
Details available
Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
Published: 2022-03-14T22:20:30.000Z
Updated: 2024-08-04T03:30:38.260Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42388 |
vulnerable | 2026-06-08 05:35:22.264011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42387 |
vulnerable | 2026-06-08 05:35:22.262263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18657 |
vulnerable | 2026-06-08 05:13:12.045678 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16535 |
vulnerable | 2026-06-08 05:13:08.542072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15024 |
vulnerable | 2026-06-08 05:12:56.561588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14672 |
vulnerable | 2026-06-08 05:10:53.275077 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14671 |
vulnerable | 2026-06-08 05:10:53.274800 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14670 |
vulnerable | 2026-06-08 05:10:53.274398 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14669 |
vulnerable | 2026-06-08 05:10:53.274069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14668 |
vulnerable | 2026-06-08 05:10:53.272657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.