CVE Vulnerabilities

CVE-2024-21303

Published: Jul 09, 2024 | Modified: Sep 10, 2024
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Affected Software

Name Vendor Start Version End Version
Sql_server_2016 Microsoft 13.0.0.0 (including) 13.0.6441.1 (including)
Sql_server_2016 Microsoft 13.0.6441.2 (including) 13.0.7037.1 (including)
Sql_server_2016 Microsoft 13.0.6441.1-sp1 (including) 13.0.6441.1-sp1 (including)
Sql_server_2016 Microsoft 13.0.6441.1-sp2 (including) 13.0.6441.1-sp2 (including)
Sql_server_2016 Microsoft 13.0.7037.1-sp1 (including) 13.0.7037.1-sp1 (including)
Sql_server_2016 Microsoft 13.0.7037.1-sp2 (including) 13.0.7037.1-sp2 (including)
Sql_server_2017 Microsoft 14.0.0.0 (including) 14.0.2056.2 (excluding)
Sql_server_2017 Microsoft 14.0.2056.3 (including) 14.0.3471.2 (excluding)
Sql_server_2019 Microsoft 15.0.0.0 (including) 15.0.2116.2 (excluding)
Sql_server_2019 Microsoft 15.0.2116.3 (including) 15.0.4382.1 (excluding)
Sql_server_2022 Microsoft 16.0.0.0 (including) 16.0.1121.4 (excluding)
Sql_server_2022 Microsoft 16.0.1121.5 (including) 16.0.4131.2 (excluding)

References