CVE-2021-42391CWE-369

CVE-2021-42391: vulnerability in yandex clickhouse

Published · Updated

Follow this CVE+ Monitor clickhouse

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.
Affected products
yandex · clickhouse
Related CVEs — yandex clickhouse

In the same product, most dangerous first.

CVE-2021-43304—CVE-2021-43304EPSS 1.7%CVE-2021-43305—CVE-2021-43305EPSS 1.7%CVE-2021-42387—CVE-2021-42387EPSS 1.6%CVE-2021-42388—CVE-2021-42388EPSS 1.6%CVE-2021-42390—CVE-2021-42390EPSS 1.3%CVE-2021-42389—CVE-2021-42389EPSS 1.3%