Vulnerabilities (CVE)

Filtered by vendor Yandex Subscribe
Filtered by product Clickhouse
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-16535 1 Yandex 1 Clickhouse 2020-01-03 7.5 HIGH 9.8 CRITICAL
In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol.
CVE-2018-14671 1 Yandex 1 Clickhouse 2019-08-29 7.5 HIGH 9.8 CRITICAL
In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability.
CVE-2018-14670 1 Yandex 1 Clickhouse 2019-08-28 7.5 HIGH 9.8 CRITICAL
Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database.