CVE Vulnerabilities

CVE-2016-7250

Published: Nov 10, 2016 | Modified: Oct 12, 2018
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Microsoft SQL Server 2014 SP1, 2014 SP2, and 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, aka SQL RDBMS Engine Elevation of Privilege Vulnerability.

Affected Software

Name Vendor Start Version End Version
Sql_server Microsoft 2014-sp1 (including) 2014-sp1 (including)
Sql_server Microsoft 2014-sp2 (including) 2014-sp2 (including)
Sql_server Microsoft 2016 (including) 2016 (including)

References