Description
Microsoft SQL OLE DB Remote Code Execution Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft ODBC Driver 17 for SQL Server on Linux | 17.0.0.0 – < 17.10.4.1 | 17.10.4.1 |
| Microsoft | Microsoft ODBC Driver 17 for SQL Server on MacOS | 17.0.0.0 – < 17.10.4.1 | 17.10.4.1 |
| Microsoft | Microsoft ODBC Driver 17 for SQL Server on Windows | 17.0.0.0 – < 17.10.4.1 | 17.10.4.1 |
| Microsoft | Microsoft ODBC Driver 18 for SQL Server on Linux | 18.0.0.0 – < 18.2.1.1 | 18.2.1.1 |
| Microsoft | Microsoft ODBC Driver 18 for SQL Server on MacOS | 18.0.0.0 – < 18.2.1.1 | 18.2.1.1 |
| Microsoft | Microsoft ODBC Driver 18 for SQL Server on Windows | 18.0.0.0 – < 18.2.2.1 | 18.2.2.1 |
| Microsoft | Microsoft OLE DB Driver 18 for SQL Server | 18.0.0 – < 18.6.0006.0 | 18.6.0006.0 |
| Microsoft | Microsoft OLE DB Driver 19 for SQL Server | 19.0.0 – < 19.3.0001.0 | 19.3.0001.0 |
| Microsoft | Microsoft SQL Server 2019 (CU 21) | 15.0.0 – < 15.0.4316.3 | 15.0.4316.3 |
| Microsoft | Microsoft SQL Server 2022 (CU 5) | 15.0.0 – < 16.0.4053.3 | 16.0.4053.3 |
Advisories 2
- SSA-556635 SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0 Siemens ProductCERT · Apr 9, 2024
- MSRC-CVE-2023-38169 Microsoft SQL OLE DB Remote Code Execution Vulnerability Microsoft Security Response Center · Aug 8, 2023
References
- Microsoft SQL OLE DB Remote Code Execution Vulnerability vendor-advisory patch