Medium · 5.5 CVE-2023-36728 EUVD-2023-40671GHSA-qqpc-cw23-65wv

Microsoft SQL Server Denial of Service Vulnerability

Published Oct 10, 2023 · Updated Apr 14, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft ODBC Driver 17 for SQL Server on Linux Product: Microsoft ODBC Driver 17 for SQL Server on MacOS Product: Microsoft ODBC Driver 17 for SQL Server on Windows Product: Microsoft ODBC Driver 18 for SQL Server on Linux Product: Microsoft ODBC Driver 18 for SQL Server on MacOS Product: Microsoft ODBC Driver 18 for SQL Server on Windows Product: Microsoft OLE DB Driver 18 for SQL Server Product: Microsoft OLE DB Driver 19 for SQL Server Product: Microsoft SQL Server 2014 Service Pack 3 (CU 4) Product: Microsoft SQL Server 2014 Service Pack 3 (GDR) Product: Microsoft SQL Server 2016 Service Pack 3 (GDR) Product: Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack Product: Microsoft SQL Server 2017 (CU 31) Product: Microsoft SQL Server 2017 (GDR) Product: Microsoft SQL Server 2019 (CU 22) Product: Microsoft SQL Server 2019 (GDR) Product: Microsoft SQL Server 2022 (CU 8) Product: Microsoft SQL Server 2022 (GDR) Platform: Linux Platform: macOS Platform: Windows

Description

Microsoft SQL Server Denial of Service Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft SQL Server 2019 (CU 22)	15.0.0 – < 15.0.4326.1	15.0.4326.1
Microsoft	Microsoft SQL Server 2022 (CU 8)	15.0.0 – < 16.0.4080.1	16.0.4080.1
Microsoft	Microsoft SQL Server 2017 (GDR)	14.0.0 – < 14.0.2052.1	14.0.2052.1
Microsoft	Microsoft SQL Server 2014 Service Pack 3 (GDR)	12.0.0 – < 12.0.6179.1	12.0.6179.1
Microsoft	Microsoft SQL Server 2014 Service Pack 3 (CU 4)	12.0.0 – < 12.0.6449.1	12.0.6449.1
Microsoft	Microsoft SQL Server 2019 (GDR)	15.0.0 – < 15.0.2104.1	15.0.2104.1
Microsoft	Microsoft SQL Server 2016 Service Pack 3 (GDR)	13.0.0 – < 13.0.6435.1	13.0.6435.1
Microsoft	Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack	13.0.0 – < 13.0.7029.3	13.0.7029.3
Microsoft	Microsoft SQL Server 2017 (CU 31)	14.0.0 – < 14.0.3465.1	14.0.3465.1
Microsoft	Microsoft SQL Server 2022 (GDR)	16.0.0 – < 16.0.1105.1	16.0.1105.1
Microsoft	Microsoft OLE DB Driver 19 for SQL Server	19.0.0 – < 19.3.0002.0	19.3.0002.0
Microsoft	Microsoft OLE DB Driver 18 for SQL Server	18.0.0 – < 18.6.0007.0	18.6.0007.0
Microsoft	Microsoft ODBC Driver 17 for SQL Server on Windows	17.0.0.0 – < 17.10.5.1	17.10.5.1
Microsoft	Microsoft ODBC Driver 17 for SQL Server on Linux	17.0.0.0 – < 17.10.5.1	17.10.5.1
Microsoft	Microsoft ODBC Driver 17 for SQL Server on MacOS	17.0.0.0 – < 17.10.5.1	17.10.5.1
Microsoft	Microsoft ODBC Driver 18 for SQL Server on Windows	18.0.0.0 – < 18.3.2.1	18.3.2.1
Microsoft	Microsoft ODBC Driver 18 for SQL Server on Linux	18.0.0.0 – < 18.3.2.1	18.3.2.1
Microsoft	Microsoft ODBC Driver 18 for SQL Server on MacOS	18.0.0.0 – < 18.3.2.1	18.3.2.1

Advisories 2

SSA-556635 SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0 Siemens ProductCERT · Apr 9, 2024
MSRC-CVE-2023-36728 Microsoft SQL Server Denial of Service Vulnerability Microsoft Security Response Center · Nov 14, 2023

References

Microsoft SQL Server Denial of Service Vulnerability vendor-advisory