Heap Buffer Overflow Vulnerability in ClickHouse by Altinity
CVE-2022-44011

6.5MEDIUM

Key Information:

Vendor

Clickhouse

Status
Clickhouse
Vendor
CVE Published:
23 November 2023

What is CVE-2022-44011?

A vulnerability in ClickHouse prior to version 22.9.1.2603 allows authenticated users with data loading capabilities to exploit a heap buffer overflow. This exploitation occurs when a user inserts a malformed CapnProto object, leading to the potential crashing of the server. Affected users are encouraged to upgrade to the latest versions, including 22.9.1.2603 and prior patched releases, to mitigate this issue.

References

https://clickhouse.com

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.