Description
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft OLE DB Driver 18 for SQL Server | 18.0.0 – < 18.6.0006.0 | 18.6.0006.0 |
| Microsoft | Microsoft OLE DB Driver 19 for SQL Server | 19.0.0 – < 19.3.0001.0 | 19.3.0001.0 |
| Microsoft | Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) | 16.11.0 – < 16.11.33 | 16.11.33 |
| Microsoft | Microsoft Visual Studio 2022 version 17.2 | 17.2.0 – < 17.2.23 | 17.2.23 |
| Microsoft | Microsoft Visual Studio 2022 version 17.4 | 17.4.0 – < 17.4.15 | 17.4.15 |
| Microsoft | Microsoft Visual Studio 2022 version 17.6 | 17.6.0 – < 17.6.11 | 17.6.11 |
| Microsoft | Microsoft Visual Studio 2022 version 17.8 | 17.8.0 – < 17.8.4 | 17.8.4 |
| Microsoft | Microsoft ODBC Driver 18 for SQL Server on MacOS | 18.0.0.0 – < 18.2.1.1 | 18.2.1.1 |
| Microsoft | Microsoft ODBC Driver 18 for SQL Server on Linux | 18.0.0.0 – < 18.2.1.1 | 18.2.1.1 |
| Microsoft | Microsoft ODBC Driver 17 for SQL Server on MacOS | 17.0.0.0 – < 17.10.4.1 | 17.10.4.1 |
| Microsoft | Microsoft ODBC Driver 17 for SQL Server on Linux | 17.0.0.0 – < 17.10.4.1 | 17.10.4.1 |
| Microsoft | Microsoft ODBC Driver 18 for SQL Server on Windows | 18.0.0.0 – < 18.2.2.1 | 18.2.2.1 |
| Microsoft | Microsoft ODBC Driver 17 for SQL Server on Windows | 17.0.0.0 – < 17.10.4.1 | 17.10.4.1 |
Advisories 3
- SSA-556635 SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0 Siemens ProductCERT · Apr 9, 2024
- MSRC-CVE-2023-29349 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability Microsoft Security Response Center · Jan 9, 2024
- WID-SEC-2023-1483 Microsoft SQL Server ODBC Treiber: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Jun 15, 2023
References
- Microsoft ODBC and OLE DB Remote Code Execution Vulnerability vendor-advisory