CVE-2023-48298 - Vulnerability Details - OpenCVE

ReportizFlow

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an unauthenticated attacker. The vulnerability is very similar to CVE-2023-47118 with how the vulnerable function can be exploited.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Clickhouse	Clickhouse Clickhouse Cloud

Configuration 1 [-]

OR	cpe:2.3:a:clickhouse:clickhouse::::::::
	cpe:2.3:a:clickhouse:clickhouse::::::::
	cpe:2.3:a:clickhouse:clickhouse::::::::
	cpe:2.3:a:clickhouse:clickhouse::::::::
	cpe:2.3:a:clickhouse:clickhouse_cloud::::::::

No data.

References

Link	Providers
https://github.com/ClickHouse/ClickHouse/pull/56795
https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938

History

Wed, 27 Nov 2024 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-12-21T23:07:43.901Z

Updated: 2024-11-27T15:47:44.723Z

Reserved: 2023-11-14T17:41:15.571Z

Link: CVE-2023-48298

Vulnrichment

Updated: 2024-08-02T21:23:39.516Z

NVD

Status : Modified

Published: 2023-12-21T23:15:09.047

Modified: 2024-11-21T08:31:26.090

Link: CVE-2023-48298

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-48298", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-11-14T17:41:15.571Z", "datePublished": "2023-12-21T23:07:43.901Z", "dateUpdated": "2024-11-27T15:47:44.723Z"}, "containers": {"cna": {"title": "Integer underflow leading to stack overflow in FPC codec decompression", "problemTypes": [{"descriptions": [{"cweId": "CWE-191", "lang": "en", "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938"}, {"name": "https://github.com/ClickHouse/ClickHouse/pull/56795", "tags": ["x_refsource_MISC"], "url": "https://github.com/ClickHouse/ClickHouse/pull/56795"}], "affected": [{"vendor": "ClickHouse", "product": "ClickHouse", "versions": [{"version": "<= 23.10.2.14", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-12-21T23:07:43.901Z"}, "descriptions": [{"lang": "en", "value": "ClickHouse\u00ae is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an unauthenticated attacker. The vulnerability is very similar to CVE-2023-47118 with how the vulnerable function can be exploited.\n"}], "source": {"advisory": "GHSA-qw9f-qv29-8938", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T21:23:39.516Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938"}, {"name": "https://github.com/ClickHouse/ClickHouse/pull/56795", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/ClickHouse/ClickHouse/pull/56795"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-27T15:47:32.929815Z", "id": "CVE-2023-48298", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-27T15:47:44.723Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938", "name": "https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/ClickHouse/ClickHouse/pull/56795", "name": "https://github.com/ClickHouse/ClickHouse/pull/56795", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T21:23:39.516Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-48298", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-27T15:47:32.929815Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-27T15:47:39.243Z"}}], "cna": {"title": "Integer underflow leading to stack overflow in FPC codec decompression", "source": {"advisory": "GHSA-qw9f-qv29-8938", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "ClickHouse", "product": "ClickHouse", "versions": [{"status": "affected", "version": "<= 23.10.2.14"}]}], "references": [{"url": "https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938", "name": "https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/ClickHouse/ClickHouse/pull/56795", "name": "https://github.com/ClickHouse/ClickHouse/pull/56795", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "ClickHouse\u00ae is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an unauthenticated attacker. The vulnerability is very similar to CVE-2023-47118 with how the vulnerable function can be exploited.\n"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-191", "description": "CWE-191: Integer Underflow (Wrap or Wraparound)"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-12-21T23:07:43.901Z"}}}, "cveMetadata": {"cveId": "CVE-2023-48298", "state": "PUBLISHED", "dateUpdated": "2024-11-27T15:47:44.723Z", "dateReserved": "2023-11-14T17:41:15.571Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2023-12-21T23:07:43.901Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA3ACE71-E086-4AE4-99EE-42AD774EED64", "versionEndIncluding": "23.3.17.13", "versionStartIncluding": "23.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*", "matchCriteriaId": "A32881DE-F775-4AC0-A88D-9BC7885D116E", "versionEndIncluding": "23.8.7.24", "versionStartIncluding": "23.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*", "matchCriteriaId": "65BDEEEB-BC9D-4AA5-BE72-D0C67A88A3FA", "versionEndIncluding": "23.9.5.29", "versionStartIncluding": "23.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*", "matchCriteriaId": "2CAC16B5-C710-4F5F-9E65-27E260D110A5", "versionEndIncluding": "23.10.4.25", "versionStartIncluding": "23.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:clickhouse:clickhouse_cloud:*:*:*:*:*:*:*:*", "matchCriteriaId": "3D2CD6AA-64F5-4D44-B0CA-69A1F4416E16", "versionEndIncluding": "23.9.2.47475", "versionStartIncluding": "23.9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "ClickHouse\u00ae is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an unauthenticated attacker. The vulnerability is very similar to CVE-2023-47118 with how the vulnerable function can be exploited.\n"}, {"lang": "es", "value": "ClickHouse\u00ae es un sistema de gesti\u00f3n de bases de datos orientado a columnas de c\u00f3digo abierto que permite generar informes de datos anal\u00edticos en tiempo real. Esta vulnerabilidad es un desbordamiento insuficiente de enteros que provoca un bloqueo debido al desbordamiento de b\u00fafer de pila en la descompresi\u00f3n del c\u00f3dec FPC. Puede ser desencadenado y explotado por un atacante no autenticado. La vulnerabilidad es muy similar a CVE-2023-47118 en cuanto a c\u00f3mo se puede explotar la funci\u00f3n vulnerable."}], "id": "CVE-2023-48298", "lastModified": "2024-11-21T08:31:26.090", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-12-21T23:15:09.047", "references": [{"source": "[email protected]", "tags": ["Patch"], "url": "https://github.com/ClickHouse/ClickHouse/pull/56795"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/ClickHouse/ClickHouse/pull/56795"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://github.com/ClickHouse/ClickHouse/security/advisories/GHSA-qw9f-qv29-8938"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-191"}], "source": "[email protected]", "type": "Secondary"}]}