CVE Vulnerabilities

CVE-2024-28944

Numeric Truncation Error

Published: Apr 09, 2024 | Modified: Jan 15, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Weakness

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

Affected Software

NameVendorStart VersionEnd Version
Ole_db_driver_for_sql_serverMicrosoft18.0.2 (including)18.7.0002.0 (excluding)
Ole_db_driver_for_sql_serverMicrosoft19.0.0 (including)19.3.0003.0 (excluding)
Sql_server_2019Microsoft15.0.2000.5 (including)15.0.2110.4 (excluding)
Sql_server_2019Microsoft15.0.4003.23 (including)15.0.4360.2 (excluding)
Sql_server_2022Microsoft16.0.1000.6 (including)16.0.1115.1 (excluding)
Sql_server_2022Microsoft16.0.4003.1 (including)16.0.4120.1 (excluding)

Potential Mitigations

References