All vulnerabilities

Servers and applications

CVE-2024-6873

Specially crafted request could caused undefined behavior which may lead to Remote Code Execution.

Severity
High
Published
1 Aug 2024
Last changed
1 Aug 2024
Added to UpHeron
3 Nov 2026
Fixed in
23.8.15.35-lts, 24.1, 24.3.4.147-lts, 24.4.2.141-stable, 24.5.1.1763, 24.6.1.4423-stable
Also known as
GHSA-432f-r822-j66f
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
ClickHouseServers and applications · github:clickhouse/clickhouse
  • Every version before 24.5.1.1763
  • Every version before 23.8.15.35-lts
  • Every version before 24.4.2.141-stable
  • Every version before 24.3.4.147-lts
  • Every version before 24.6.1.4423-stable
  • Every version before 24.1

References