CVE-2022-44010

An issue was discovered in ClickHouse before 22.9.1.2603

published November 23, 2023

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endpoint (usually listening on port 8123 by default), causing a heap-based buffer overflow that crashes the process. This does not require authentication. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00968 · 61.5th percentile
Published
2023-11-23T00:00Z
EPSS history
Timeline
  • 23 NOV 00:00Z
    An issue was discovered in ClickHouse before 22.9.1.2603
    cvelistv5