VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 15, 2019· Updated Aug 5, 2024

CVE-2018-14670

CVE-2018-14670

Description

Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database.

Affected products

1

Patches

1
ceb4d4a3a5d5

fix build (do not remove my_compress.c.o from libmysqlclient.a) [#METR-23582]

https://github.com/clickhouse/clickhouseAlexey ZatelepinJan 9, 2017via osv
commit
1 file changed · +1 −1
  • libs/libmysqlxx/patch.sh+1 −1 modified
    @@ -11,6 +11,6 @@ mkdir -p tmp
 cd tmp
 
 ar x $LIB
-ar t $LIB | grep -v 'my_new.cc.o' | egrep -v $ZLIB_OBJS_REGEX | xargs ar rcs $OUT
+ar t $LIB | grep -v 'my_new.cc.o' | egrep --word-regex -v $ZLIB_OBJS_REGEX | xargs ar rcs $OUT
 
 cd ..

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

1

News mentions

0

No linked articles in our index yet.