CVE-2019-16535: Integer Underflow
Published Dec 30, 2019
·Updated
In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol.
Affected Software
2 affected components
Yandex Clickhouse<19.14
Clickhouse Clickhouse<19.14
Event History
Dec 30, 2019
CVE Published
via MITRE·02:35 PM
Data Sourced
via MITRE·02:35 PM
DescriptionWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-16535?
CVE-2019-16535 has a high severity due to its potential for remote code execution and denial of service.
2
How do I fix CVE-2019-16535?
To mitigate CVE-2019-16535, you should upgrade ClickHouse to version 19.14 or later.
3
What are the main vulnerabilities in CVE-2019-16535?
CVE-2019-16535 involves out-of-bounds read, out-of-bounds write, and integer underflow in decompression algorithms.
4
Which versions of ClickHouse are affected by CVE-2019-16535?
All versions of ClickHouse prior to 19.14 are affected by CVE-2019-16535.
5
What could be the consequences of exploiting CVE-2019-16535?
Exploitation of CVE-2019-16535 could lead to remote code execution or denial of service attacks.