Critical
Security advisory
Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-14670
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 05:33 UTC · Revision 1
Source evidence
Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database.
osv:CVE-2018-14670
Complete source record
{
"id": "1e162deff151e534e3d72e494e9e0471877ff8891698d1c97b61cdc65cdec928",
"url": "https://osv.dev/vulnerability/CVE-2018-14670",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-14670",
"summary": "Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database.",
"evidence": "osv:CVE-2018-14670",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2018-14670",
"aliases": [
"CVE-2018-14670"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/clickhouse/clickhouse",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "ceb4d4a3a5d55d075603e7b3cea09d70a81d317a"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.1.54131"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v1.1.54130-testing",
"v1.1.54129-testing",
"v1.1.54127-testing",
"v1.1.54127-stable",
"v1.1.54126-testing",
"v1.1.54104-testing",
"v1.1.54128-testing",
"v1.1.54125-testing",
"v1.1.54124-testing",
"v1.1.54123-testing",
"v1.1.54118-testing",
"v1.1.54121-testing",
"v1.1.54120-testing",
"v1.1.54119-testing",
"v1.1.54115-testing",
"v1.1.54113-testing",
"v1.1.54112-testing",
"v1.1.54112-stable",
"v1.1.54111-testing",
"v1.1.54110-testing",
"v1.1.54109-testing",
"v1.1.3-testing",
"v1.1.1-testing",
"v1.1.54108-testing",
"v1.1.54106-testing",
"v1.1.54105-testing",
"v1.1.54103-testing",
"v1.1.54102-testing",
"v1.1.54101-testing",
"v1.1.54100-testing",
"v1.1.54099-testing",
"v1.1.54107-testing",
"v1.1.54098-testing",
"v1.1.54097-testing",
"v1.1.54096-testing",
"v1.1.54095-testing",
"v1.1.54093-testing",
"v1.1.54092-testing",
"v1.1.54083-testing",
"v1.1.54083-stable",
"v1.1.54080-testing",
"v1.1.54080-stable",
"v1.1.54079-testing",
"v1.1.54078-testing",
"v1.1.54077-testing",
"v1.1.54076-testing",
"v1.1.54074-testing",
"v1.1.54074-stable",
"v1.1.54073-testing",
"v1.1.54072-testing",
"v1.1.54070-testing",
"v1.1.54069-testing",
"v1.1.54068-testing",
"v1.1.54064-testing",
"v1.1.54060-testing",
"v1.1.54057-testing",
"v1.1.54056-testing",
"v1.1.54055-testing",
"v1.1.54054-testing",
"v1.1.54053-testing",
"v1.1.54052-testing",
"v1.1.54051-testing",
"v1.1.54050-testing",
"v1.1.54049-testing",
"v1.1.54048-testing",
"v1.1.54047-testing",
"v1.1.54045-testing",
"v1.1.54044-testing",
"v1.1.54043-testing",
"v1.1.54041-testing",
"v1.1.54042-testing",
"v1.1.54040-testing",
"v1.1.54039-testing",
"v1.1.54038-testing",
"v1.1.54037-testing",
"v1.1.54036-testing",
"v1.1.54035-testing",
"v1.1.54034-testing",
"v1.1.54033-testing",
"v1.1.54031-testing",
"v1.1.54030-testing",
"v1.1.54030-stable",
"v1.1.54029-testing",
"v1.1.54028-testing",
"v1.1.54027-testing",
"v1.1.54026-testing",
"v1.1.54025-testing",
"v1.1.54022-testing",
"v1.1.54022-stable",
"v1.1.54021-testing",
"v1.1.54020-testing",
"v1.1.54020-stable",
"v1.1.54019-testing",
"v1.1.54019-stable",
"v1.1.54018-testing",
"v1.1.54017-testing",
"v1.1.54016-testing",
"v1.1.54015-testing",
"v1.1.54012-testing",
"v1.1.54011-testing",
"v1.1.54011-stable",
"54011",
"54010",
"54009",
"54008",
"54007",
"54006",
"54005",
"54004",
"54003",
"54002",
"54001",
"54000",
"53999",
"53997",
"53996",
"53995",
"53994",
"53993",
"53992",
"53991",
"53990",
"53989",
"53988",
"53987",
"53986",
"53985",
"53984",
"53983",
"53982",
"53981",
"53980",
"53979",
"53978",
"53977",
"53976",
"53975",
"53974",
"53973"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14670.json"
}
}
],
"modified": "2026-10-24T10:30:30.405322314Z",
"provider": "osv",
"references": [
"https://clickhouse.yandex/docs/en/security_changelog/"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2018-14670",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 432572,
"published_at": "2019-08-15T18:15:13.82+00:00"
}