p PatchFirst

CVE-2022-44011

CVE-2022-44011

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.

CVSS 6.5 · Medium · EPSS 0.7%

Published
Updated

Stack: system · database

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • clickhouse Debian:12

    Versions
    • 18.16.1+ds-7.3
    • 18.16.1+ds-7.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • clickhouse Ubuntu:20.04:LTS

    Versions
    • 18.16.1+ds-5
    • 18.16.1+ds-5ubuntu1
    • 18.16.1+ds-5ubuntu2
    • 18.16.1+ds-6ubuntu1
    • 18.16.1+ds-7
    • 18.16.1+ds-7ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • clickhouse Ubuntu:24.04:LTS

    Versions
    • 18.16.1+ds-7.4
    • 18.16.1+ds-7.4build1
    • 18.16.1+ds-7.4build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →