SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityVendor advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35272 CVE-2024-35272
HIGH
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Record summary
CVE-2024-35272 has a selected CVSS score of 8.8 (high).
Description
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Description source: GitHub Advisory
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 9, 2024 · Source: CVE List
Affected products and versions
Showing 12 of 13| Product | Source | Version range | Status |
|---|---|---|---|
Microsoft SQL Server 2016 Service Pack 3 (GDR)Browse Microsoft / Microsoft SQL Server 2016 Service Pack 3 (GDR) | CVE List | 13.0.0 to < 13.0.6441.1 | affected |
Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature PackBrowse Microsoft / Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack | CVE List | 13.0.0 to < 13.0.7037.1 | affected |
Microsoft SQL Server 2017 (CU 31)Browse Microsoft / Microsoft SQL Server 2017 (CU 31) | CVE List | 14.0.0 to < 14.0.3471.2 | affected |
Microsoft SQL Server 2019 (GDR)Browse Microsoft / Microsoft SQL Server 2019 (GDR) | CVE List | 15.0.0 to < 15.0.2116.2 | affected |
Microsoft SQL Server 2019 for x64-based Systems (CU 27)Browse Microsoft / Microsoft SQL Server 2019 for x64-based Systems (CU 27) | CVE List | 15.0.0 to < 15.0.4382.1 | affected |
Microsoft SQL Server 2022 (GDR)Browse Microsoft / Microsoft SQL Server 2022 (GDR) | CVE List | 16.0.0 to < 16.0.1121.4 | affected |
Microsoft SQL Server 2022 for (CU 13)Browse Microsoft / Microsoft SQL Server 2022 for (CU 13) | CVE List | 16.0.0 to < 16.0.4131.2 | affected |
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)Browse Microsoft / Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) | CVE List | 15.9.0 to < 15.9.66 | affected |
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)Browse Microsoft / Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) | CVE List | 16.11.0 to < 16.11.40 | affected |
Microsoft Visual Studio 2022 version 17.10Browse Microsoft / Microsoft Visual Studio 2022 version 17.10 | CVE List | 17.10 to < 17.10.7 | affected |
Microsoft Visual Studio 2022 version 17.11Browse Microsoft / Microsoft Visual Studio 2022 version 17.11 | CVE List | 17.11 to < 17.11.3 | affected |
Microsoft Visual Studio 2022 version 17.6Browse Microsoft / Microsoft Visual Studio 2022 version 17.6 | CVE List | 17.6.0 to < 17.6.19 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-35272