CVE Daily

CVE-2019-16535

In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer u...

Critical CVSS 9.8

Overview

In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol.

CWE: CWE-125 Published: 2019-12-30T15:15:10.673
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags