Skip to content
OpenAdvisories
Unscored CVE-2021-42390 EUVD-2021-29361GHSA-mf33-8pgp-q5fx

Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is use…

Published Mar 14, 2022 · Updated Aug 4, 2024 · Assigned by JFROG

Description

Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.

Affected products

VendorProductAffectedFixed
yandex clickhouse unspecified – < 21.10.2.15-stable 21.10.2.15-stable

References