Remote Code Execution Vulnerability Affects Microsoft OLE DB Driver for SQL Server
CVE-2024-29984

8.8HIGH

Summary

A remote code execution vulnerability exists in Microsoft OLE DB Driver for SQL Server, which could allow an attacker to execute arbitrary code on the system. Successful exploitation could result in the attacker gaining access to sensitive information and system resources. Users and organizations utilizing the OLE DB Driver for SQL Server are advised to apply the latest security updates and monitor for any suspicious activity to mitigate potential risks associated with this vulnerability. For more information, please refer to the official Microsoft advisory.

Affected Version(s)

Microsoft OLE DB Driver 18 for SQL Server Unknown 18.0.0 < 18.7.0002.0

Microsoft OLE DB Driver 19 for SQL Server Unknown 19.0.0 < 19.3.0003.0

Microsoft SQL Server 2019 (CU 25) x64-based Systems 15.0.0 < 15.0.4360.2

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed
.