CVE-2024-29985

HIGH8.8Memory safety

JSON export Create alert

Description

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

E

Unchanged

RL

O

RC

Changed

Affected products

Microsoft / Microsoft OLE DB Driver 18 for SQL Server18.0.0 – 18.7.0002.0
Microsoft / Microsoft OLE DB Driver 19 for SQL Server19.0.0 – 19.3.0003.0
Microsoft / Microsoft SQL Server 2019 (CU 25)15.0.0 – 15.0.4360.2
Microsoft / Microsoft SQL Server 2019 (GDR)15.0.0 – 15.0.2110.4
Microsoft / Microsoft SQL Server 2022 for (CU 12)16.0.0 – 16.0.4120.1
Microsoft / Microsoft SQL Server 2022 (GDR)16.0.0 – 16.0.1115.1

References

VENDOR_ADVISORYhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29985

Updated 51m ago · 2 sources