A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka Microsoft SQL Server Remote Code Execution Vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sql_server | Microsoft | 2014-sp2 (including) | 2014-sp2 (including) |
| Sql_server | Microsoft | 2014-sp3 (including) | 2014-sp3 (including) |
| Sql_server_2016 | Microsoft | 13.0.4001.0 (including) | 13.0.4259.0 (excluding) |
| Sql_server_2016 | Microsoft | 13.0.4411.0 (including) | 13.0.4604.0 (excluding) |
| Sql_server_2016 | Microsoft | 13.0.5026.0 (including) | 13.0.5101.9 (excluding) |
| Sql_server_2016 | Microsoft | 13.0.5149.0 (including) | 13.0.5366.0 (excluding) |
| Sql_server_2017 | Microsoft | 14.0.1000.169 (including) | 14.0.2027.2 (excluding) |
| Sql_server_2017 | Microsoft | 14.0.3006.16 (including) | 14.0.3192.2 (excluding) |