Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-14671

In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
yandex

Description

In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ClickHouse ClickHouse

  • All versions prior to version 18.10.3.affected

References