Database/Control plane, storage & DevOps

ClickHouse: Second heap out-of-bounds read in LZ4::decompressImpl reachable from a client query

CVE-2021-42388Control plane, storage & DevOpscurated

Impact

Second heap out-of-bounds read in LZ4::decompressImpl reachable from a client query

Who can reach it

Network (remote)

What to do

Control-plane: upgrade; require auth on the native port

References

https://nvd.nist.gov/vuln/detail/CVE-2021-42388

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.