CVE-2024-49017

HIGH8.8Memory safety

JSON export Create alert

Description

SQL Server Native Client Remote Code Execution Vulnerability

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

E

Unchanged

RL

O

RC

Changed

Affected products

Microsoft / Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack13.0.0 – 13.0.7050.2
Microsoft / Microsoft SQL Server 2016 Service Pack 3 (GDR)13.0.0 – 13.0.6455.2
Microsoft / Microsoft SQL Server 2017 (CU 31)14.0.0 – 14.0.3485.1
Microsoft / Microsoft SQL Server 2017 (GDR)14.0.0 – 14.0.2070.1
Microsoft / Microsoft SQL Server 2019 (CU 29)15.0.0 – 15.0.4410.1
Microsoft / Microsoft SQL Server 2019 (GDR)15.0.0 – 15.0.2130.3

References

VENDOR_ADVISORYhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49017

Updated 41m ago · 2 sources