CVE-2021-42389CWE-369

CVE-2021-42389: vulnerability in yandex clickhouse

Published · Updated

Follow this CVE+ Monitor clickhouse

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
Affected products
yandex · clickhouse
Related CVEs — yandex clickhouse

In the same product, most dangerous first.

CVE-2021-43304—CVE-2021-43304EPSS 1.7%CVE-2021-43305—CVE-2021-43305EPSS 1.7%CVE-2021-42387—CVE-2021-42387EPSS 1.6%CVE-2021-42388—CVE-2021-42388EPSS 1.6%CVE-2021-42391—CVE-2021-42391EPSS 1.4%CVE-2021-42390—CVE-2021-42390EPSS 1.3%