CVE-2021-42391

Publication date

2022-03-14 22:20:33

Family

JFROG

State

PUBLISHED

Description

Divide-by-zero in Clickhouses Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.