Description
Microsoft SQL OLE DB Remote Code Execution Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (GDR) | 15.0.0 – < 15.0.2104.1 | 15.0.2104.1 |
| Microsoft | Microsoft SQL Server 2022 (GDR) | 16.0.0 – < 16.0.1105.1 | 16.0.1105.1 |
| Microsoft | Microsoft OLE DB Driver 19 for SQL Server | 19.0.0 – < 19.3.0002.0 | 19.3.0002.0 |
| Microsoft | Microsoft OLE DB Driver 18 for SQL Server | 18.0.0 – < 18.6.0007.0 | 18.6.0007.0 |
| Microsoft | Microsoft SQL Server 2022 (CU 8) | 15.0.0 – < 16.0.4080.1 | 16.0.4080.1 |
| Microsoft | Microsoft SQL Server 2019 (CU 22) | 15.0.0 – < 15.0.4326.1 | 15.0.4326.1 |
Advisories 2
- SSA-556635 SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0 Siemens ProductCERT · Apr 9, 2024
- MSRC-CVE-2023-36417 Microsoft SQL OLE DB Remote Code Execution Vulnerability Microsoft Security Response Center · Oct 16, 2023
References
- Microsoft SQL OLE DB Remote Code Execution Vulnerability vendor-advisory