High WID-SEC-2024-3451 31 CVEs

Microsoft SQL Server: Mehrere Schwachstellen ermöglichen Codeausführung

Published Nov 12, 2024 · Updated Nov 12, 2024 · de-DE

Vendor: Microsoft Product: SQL Server 2016 Product: SQL Server 2017 Product: SQL Server 2019 Product: SQL Server 2022 Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft SQL Server ausnutzen, um beliebigen Programmcode auszuführen.

Product

Der Microsoft SQL Server ist ein relationales Datenbankmanagementsystem von Microsoft.

Vulnerabilities 31

High 8.8

CVE-2024-38255

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-43459

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-43462

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-48993

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-48994

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-48995

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-48996

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-48997

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-48998

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-48999

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49000

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49001

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49002

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49003

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49004

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49005

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49006

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49007

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49008

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49009

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49010

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49011

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49012

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49013

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49014

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49015

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49016

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49017

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 8.8

CVE-2024-49018

SQL Server Native Client Remote Code Execution Vulnerability

SQL Server Native Client Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2017 (GDR) Microsoft SQL Server 2017 (CU 31)

Nov 12, 2024
High 7.8

CVE-2024-49021

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft SQL Server 2017 (GDR)

Nov 12, 2024
High 7.8

CVE-2024-49043

Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft SQL Server 2017 (GDR)

Nov 12, 2024

Revision history

2024-11-12 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/