CVE Vulnerabilities

CVE-2024-28944

Numeric Truncation Error

Published: Apr 09, 2024 | Modified: Jan 15, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Weakness

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

Affected Software

Name Vendor Start Version End Version
Ole_db_driver_for_sql_server Microsoft 18.0.2 (including) 18.7.0002.0 (excluding)
Ole_db_driver_for_sql_server Microsoft 19.0.0 (including) 19.3.0003.0 (excluding)
Sql_server_2019 Microsoft 15.0.2000.5 (including) 15.0.2110.4 (excluding)
Sql_server_2019 Microsoft 15.0.4003.23 (including) 15.0.4360.2 (excluding)
Sql_server_2022 Microsoft 16.0.1000.6 (including) 16.0.1115.1 (excluding)
Sql_server_2022 Microsoft 16.0.4003.1 (including) 16.0.4120.1 (excluding)

Potential Mitigations

References