Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-41436

No fix known EPSS <1%CVSS 7.5

ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl.

Published 2024-09-03 · CVE record · OSV

Products: ClickHouse

Distro releases

ReleasePackageFixed in
Debian 12clickhouseno fix
Ubuntu 20.04 LTSclickhouseno fix
Ubuntu 24.04 LTSclickhouseno fix