UBUNTU-CVE-2021-43305

Dashboard / Vulnerabilities / UBUNTU-CVE-2021-43305

UBUNTU-CVE-2021-43305

Summary:

Details: Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits. This issue is very similar to CVE-2021-43304, but the vulnerable copy operation is in a different wildCopy call.

References: https://ubuntu.com/security/CVE-2021-43305, https://github.com/ClickHouse/ClickHouse/commit/2aea1c8d4a5be320365472052d8a48bf69fd9fe9, https://github.com/ClickHouse/ClickHouse/commit/6d83eacec42c7c403c99804a713a9d38caa4a45d, https://github.com/ClickHouse/ClickHouse/pull/27136, https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms/, https://www.cve.org/CVERecord?id=CVE-2021-43305, https://ubuntu.com/security/notices/USN-6933-1