CVE-2019-16535

CRITICAL 9.8CVE-2019-16535 · Published 30/12/2019 · updated 17/06/2026

In short

CVE-2019-16535 is a CRITICAL (CVSS 9.8) vulnerability affecting clickhouse (clickhouse).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.1% of all vulnerabilities.
Fix: update to 19.14 or later.

Package	Affected versions	Patched versions
clickhouse clickhouse	`< 19.14`	`19.14`

Description

In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol.

References

clickhouse.yandex/docs/en/security_changelog · Vendor Advisory

More vulnerabilities in clickhouse

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

clickhouse

< 19.14

19.14

More vulnerabilities in clickhouse

See all →