Description (CNA)
In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ClickHouse / ClickHouse | affected All versions prior to version 18.10.3. |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.