CVE Vulnerabilities

CVE-2024-28945

Integer Underflow (Wrap or Wraparound)

Published: Apr 09, 2024 | Modified: Jan 15, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Weakness

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Affected Software

Name Vendor Start Version End Version
Ole_db_driver_for_sql_server Microsoft 18.0.2 (including) 18.7.0002.0 (excluding)
Ole_db_driver_for_sql_server Microsoft 19.0.0 (including) 19.3.0003.0 (excluding)
Sql_server_2019 Microsoft 15.0.2000.5 (including) 15.0.2110.4 (excluding)
Sql_server_2019 Microsoft 15.0.4003.23 (including) 15.0.4360.2 (excluding)
Sql_server_2022 Microsoft 16.0.1000.6 (including) 16.0.1115.1 (excluding)
Sql_server_2022 Microsoft 16.0.4003.1 (including) 16.0.4120.1 (excluding)

References