CVE-2021-42389

Publication date

2022-03-14 22:20:30

Family

JFROG

State

PUBLISHED

Description

Divide-by-zero in Clickhouses Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.