PT-2023-30321 · Unknown+1 · Clickhouse

Malacupa · Published 2023-11-26 · Updated 2024-01-04 · CVE-2023-47118

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ClickHouse versions prior to 23.10.2.13-stable ClickHouse versions prior to 23.9.4.11-stable ClickHouse versions prior to 23.8.6.16-lts ClickHouse versions prior to 23.3.16.7-lts

Description A heap buffer overflow issue was discovered in the ClickHouse server, allowing an attacker to send a specially crafted payload to the native interface exposed by default on port 9000/tcp. This triggers a bug in the decompression logic of the T64 codec, causing the ClickHouse server process to crash. The attack does not require authentication, but if triggered via HTTP protocol, a valid credential is needed as HTTP authentication takes place first.

Recommendations For versions prior to 23.10.2.13-stable, update to version 23.10.2.13-stable or later. For versions prior to 23.9.4.11-stable, update to version 23.9.4.11-stable or later. For versions prior to 23.8.6.16-lts, update to version 23.8.6.16-lts or later. For versions prior to 23.3.16.7-lts, update to version 23.3.16.7-lts or later. As a temporary workaround, consider restricting access to the native interface on port 9000/tcp to minimize the risk of exploitation.

Exploit

Fix

Heap Based Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-122

CWE-787

Related Identifiers

CVE-2023-47118

GHSA-G22G-P6Q2-X39V

Affected Products

Clickhouse

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47118.json · Exploit
• https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-g22g-p6q2-x39v · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-47118 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-47118 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47118 · Security Note
• https://ubuntu.com/security/CVE-2023-47118 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-47118 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-47118 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47118 · Note
• https://twitter.com/CVEnew/status/1737516352171315562 · Twitter Post
• https://clickhouse.com/docs/en/whats-new/security-changelog · Note
• https://t.me/cvenotify/64786 · Telegram Post
• https://t.me/echeloneyes/2315 · Telegram Post
• https://twitter.com/RedPacketSec/status/1738500702752690413 · Twitter Post
• https://clickhouse.com/docs/ru/whats-new/security-changelog · Note