Security Advisory
CVE-2021-42391
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Divide-by-zero in Clickhouses Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.