MSRC-CVE-2022-23276 — SQL Server for Linux Containers Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

If I'm running SQL Server 2019 on premise, am I vulnerable to this CVE?
This vulnerability only exists in the containerized version of SQL Server 2019 for Linux. If you are running that version, Microsoft recommends applying the update.

Security updates
15.0.2090.38 — https://support.microsoft.com/help/5010657

Vulnerabilities 1

High 7.8

CVE-2022-23276

SQL Server for Linux Containers Elevation of Privilege Vulnerability

SQL Server for Linux Containers Elevation of Privilege Vulnerability

Microsoft SQL Server 2019 for Linux Containers Linux

Feb 9, 2022

Revision history

2022-02-09 #2
Updated acknowledgment. This is an informational change only.
2022-02-08 #1
Information published.

References

CVE-2022-23276 SQL Server for Linux Containers Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23276
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss