Skip to content

Known vulnerabilities in n/a ClickHouse

Is your version affected?

CVE Summary Score Published
CVE-2019-15024 In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a… Not rated Dec 30, 2019
CVE-2019-16535 In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can… Not rated Dec 30, 2019
CVE-2018-14672 In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary… Not rated Aug 15, 2019
CVE-2018-14669 ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a… Not rated Aug 15, 2019
CVE-2018-14668 In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and… Not rated Aug 15, 2019

Other n/a products