Skip to content
OpenAdvisories
Unscored CVE-2021-42389 EUVD-2021-29360GHSA-xfh5-vqx3-c7p9

Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a…

Published Mar 14, 2022 · Updated Aug 4, 2024 · Assigned by JFROG

Description

Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.

Affected products

VendorProductAffectedFixed
yandex clickhouse unspecified – < 21.10.2.15-stable 21.10.2.15-stable

References