CVE-2025-1386 in ch-goinfo

Zusammenfassung

von MITRE • 11.04.2025

When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Zuständig

ClickHouse

Reservieren

17.02.2025

Veröffentlichung

11.04.2025

Moderieren

akzeptiert

Eintrag

VDB-304434

CPE

bereit

EPSS

0.00342

KEV

nein

Aktivitäten

very low

Quellen

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!