Security Advisory

CVE-2021-42389

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-14 22:20:30
Last updated 2024-08-04 03:30:38
Assigner JFROG
State PUBLISHED

Description

Divide-by-zero in Clickhouses Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.