CVE-2021-42390

Publication date

2022-03-14 22:20:31

Family

JFROG

State

PUBLISHED

Description

Divide-by-zero in Clickhouses DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.