Medium WID-SEC-2023-1483 6 CVEs

Microsoft SQL Server ODBC Treiber: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jun 15, 2023 · Updated Jun 15, 2023 · de-DE

Vendor: Microsoft Product: SQL Server (MSSQL) Product: SQL Server (MSSQL) ODBC Driver Linux 17 Product: SQL Server (MSSQL) ODBC Driver Linux 18 Product: SQL Server (MSSQL) ODBC Driver MacOS 17 Product: SQL Server (MSSQL) ODBC Driver MacOS 18 Product: SQL Server (MSSQL) ODBC Driver Windows 17 Product: SQL Server (MSSQL) ODBC Driver Windows 18 Product: SQL Server 2019 ODBC Driver CU21 Product: SQL Server 2022 ODBC Driver CU5 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im ODBC Treiber für den Microsoft SQL Server (MSSQL) ausnutzen, um beliebigen Programmcode auszuführen.

Product

Der Microsoft SQL Server ist ein relationales Datenbankmanagementsystem von Microsoft.

Vulnerabilities 6

High 7.8

CVE-2023-29349

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS

Jun 16, 2023
High 7.8

CVE-2023-29356

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS

Jun 16, 2023
High 7.8

CVE-2023-32025

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS

Jun 16, 2023
High 7.8

CVE-2023-32026

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS

Jun 16, 2023
High 7.8

CVE-2023-32027

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Linux Windows macOS

Jun 16, 2023
High 7.8

CVE-2023-32028

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4

Jun 16, 2023

Revision history

2023-06-15 #1
Initiale Fassung

References

Microsoft Security Advisory vom 2023-06-15
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29349
Microsoft Security Advisory vom 2023-06-15
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32028
Microsoft Security Advisory vom 2023-06-15
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32027
Microsoft Security Advisory vom 2023-06-15
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32026
Microsoft Security Advisory vom 2023-06-15
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32025
Microsoft Security Advisory vom 2023-06-15
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29356