UpHeron
All vulnerabilities

Servers and applications

CVE-2022-44011

An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.

Severity
Medium 6.5
Published
23 Nov 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
22.3.12.19, 22.6.6.16, 22.7.4.16, 22.8.2.11, 22.9.1.2603
Sources
NVD

Affected software

SoftwareAffected versions
ClickHouseServers and applications · cpe:a:clickhouse:clickhouse
  • Every version before 22.3.12.19
  • From 22.6 before 22.6.6.16
  • From 22.7 before 22.7.4.16
  • From 22.8 before 22.8.2.11
  • From 22.9 before 22.9.1.2603

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-44011
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-44011