High · 7.1 CVE-2024-37342 EUVD-2024-36971GHSA-pgxx-gq7v-fg8m

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

Published Sep 10, 2024 · Updated Aug 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft SQL Server 2017 (CU 31) Product: Microsoft SQL Server 2017 (GDR) Product: Microsoft SQL Server 2019 (CU 28) Product: Microsoft SQL Server 2019 (GDR) Product: Microsoft SQL Server 2022 (GDR) Product: Microsoft SQL Server 2022 for (CU 14)

Description

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft SQL Server 2017 (CU 31)	14.0.0 – < 14.0.3475.1	14.0.3475.1
Microsoft	Microsoft SQL Server 2017 (GDR)	14.0.0 – < 14.0.2060.1	14.0.2060.1
Microsoft	Microsoft SQL Server 2019 (CU 28)	15.0.0 – < 15.0.4390.2	15.0.4390.2
Microsoft	Microsoft SQL Server 2019 (GDR)	15.0.0 – < 15.0.2120.1	15.0.2120.1
Microsoft	Microsoft SQL Server 2022 (GDR)	16.0.0 – < 16.0.1125.1	16.0.1125.1
Microsoft	Microsoft SQL Server 2022 for (CU 14)	16.0.0 – < 16.0.4140.3	16.0.4140.3

Advisories 3

WID-SEC-2024-2119 Microsoft SQL Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 10, 2024
NCSC-2024-0364 Kwetsbaarheden verholpen in Microsoft SQL Server NCSC-NL (Netherlands) · Sep 10, 2024
MSRC-CVE-2024-37342 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Microsoft Security Response Center · Sep 10, 2024

References

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability vendor-advisory patch