SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
CVE-2024-37320
8.8HIGH
Key Information:
What is CVE-2024-37320?
A vulnerability exists in the SQL Server Native Client OLE DB Provider that allows remote attackers to execute arbitrary code. An attacker exploiting this vulnerability could take control of the affected system, potentially compromising sensitive data and disrupting services. It is crucial for users and organizations utilizing this product to apply necessary patches and updates to mitigate the risks associated with this vulnerability.
Affected Version(s)
Microsoft SQL Server 2016 Service Pack 3 (GDR) x64-based Systems 13.0.0 < 13.0.6441.1
Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack x64-based Systems 13.0.0 < 13.0.7037.1
Microsoft SQL Server 2017 (CU 31) x64-based Systems 14.0.0 < 14.0.3471.2