Remote Code Execution Vulnerability Affects Microsoft ODBC Driver for SQL Server
CVE-2024-28943
8.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 9 April 2024
What is CVE-2024-28943?
A vulnerability exists in the Microsoft ODBC Driver for SQL Server that allows an attacker to execute arbitrary code on a host that uses the vulnerable driver. By sending specially crafted messages to the driver, the attacker could exploit this vulnerability to compromise the confidentiality, integrity, and availability of the system. It is crucial for users to ensure that they are using the latest versions of the driver to mitigate potential risks associated with this vulnerability.
Affected Version(s)
Microsoft ODBC Driver 17 for SQL Server on Linux Unknown 17.0.0.0 < 17.10.6.1
Microsoft ODBC Driver 17 for SQL Server on MacOS Unknown 17.0.0.0 < 17.10.6.1
Microsoft ODBC Driver 17 for SQL Server on Windows Unknown 17.0.0.0 < 17.10.6.1