8.8Alta

CVE-2024-29043Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft Microsoft SQL Server 2022 for (CU 12); Microsoft Microsoft SQL Server 2019 (CU 25); Microsoft Microsoft SQL Server 2019 (GDR); Microsoft Microsoft SQ… Publicada: (hace 2 años)

Descripción

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Debilidad (CWE): CWE-416

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Microsoft Microsoft ODBC Driver 17 for SQL Server on Linux 17.0.0.0 – < 17.10.6.1
Microsoft Microsoft ODBC Driver 17 for SQL Server on MacOS 17.0.0.0 – < 17.10.6.1
Microsoft Microsoft ODBC Driver 17 for SQL Server on Windows 17.0.0.0 – < 17.10.6.1
Microsoft Microsoft ODBC Driver 18 for SQL Server on Linux 18.0.0.0 – < 18.3.3.1
Microsoft Microsoft ODBC Driver 18 for SQL Server on MacOS 18.0.0.0 – < 18.3.3.1
Microsoft Microsoft ODBC Driver 18 for SQL Server on Windows 18.0.0.0 – < 18.3.3.1
Microsoft Microsoft SQL Server 2019 (CU 25) 15.0.0 – < 15.0.4360.2
Microsoft Microsoft SQL Server 2019 (GDR) 15.0.0 – < 15.0.2110.4
Microsoft Microsoft SQL Server 2022 for (CU 12) 16.0.0 – < 16.0.4120.1
Microsoft Microsoft SQL Server 2022 (GDR) 16.0.0 – < 16.0.1115.1
microsoft odbc driver 17 for sql server 17.0.0.0 – < 17.10.6.1
microsoft odbc driver 18 for sql server 18.0.0.0 – < 18.3.3.1
microsoft sql server 16.0.0 – < 16.0.4120.1

Referencias y parches