https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T07:52:48.132040+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-42387 CVE-2021-42387 2026-09-29T07:52:48.156961+00:00

Affected: yandex clickhouse

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation.

 https://vulnerability.circl.lu/vuln/usn-6933-1 USN-6933-1 — clickhouse vulnerabilities 2026-09-29T07:52:48.157030+00:00

Affected: Ubuntu:20.04:LTS: clickhouse

It was discovered that ClickHouse incorrectly handled memory, leading to a heap out-of-bounds data read. An attacker could possibly use this issue to cause a denial of service, or leak sensitive information. (CVE-2021-42387, CVE-2021-41388)

It was discovered that ClickHouse incorrectly handled memory, leading to a heap-based buffer overflow. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. (CVE-2021-43305)