CVE-2018-14671: Clickhouse

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability.

Affected products

• Clickhouse Clickhouse: before 18.10.3 (fixed in 18.10.3)

Published 2019-08-15. Last modified 2026-06-17.