Skip to content
7.8 High

CVE-2023-29349 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Description

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Affected products and versions

Product Affected versions Fixed in
Microsoft OLE DB Driver 18 for SQL Server 18.0 18.0.0 → < 18.6.0006.0 18.6.0006.0
Microsoft OLE DB Driver 19 for SQL Server 19.0 19.0.0 → < 19.3.0001.0 19.3.0001.0
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) 16.11 16.11.0 → < 16.11.33 16.11.33
Microsoft Visual Studio 2022 version 17.2 17.2 17.2.0 → < 17.2.23 17.2.23
Microsoft Visual Studio 2022 version 17.4 17.4 17.4.0 → < 17.4.15 17.4.15
Microsoft Visual Studio 2022 version 17.6 17.6 17.6.0 → < 17.6.11 17.6.11
Microsoft Visual Studio 2022 version 17.8 17.8 17.8.0 → < 17.8.4 17.8.4
Microsoft ODBC Driver 18 for SQL Server on MacOS 18.0 18.0.0.0 → < 18.2.1.1 18.2.1.1
Microsoft ODBC Driver 18 for SQL Server on Linux 18.0 18.0.0.0 → < 18.2.1.1 18.2.1.1
Show the 4 other branches
Product Affected versions Fixed in
Microsoft ODBC Driver 17 for SQL Server on MacOS 17.0 17.0.0.0 → < 17.10.4.1 17.10.4.1
Microsoft ODBC Driver 17 for SQL Server on Linux 17.0 17.0.0.0 → < 17.10.4.1 17.10.4.1
Microsoft ODBC Driver 18 for SQL Server on Windows 18.0 18.0.0.0 → < 18.2.2.1 18.2.2.1
Microsoft ODBC Driver 17 for SQL Server on Windows 17.0 17.0.0.0 → < 17.10.4.1 17.10.4.1

References

Timeline

  1. Published
  2. Last modified
The 32 CVEs of Microsoft OLE DB Driver 18 for SQL Server →
Track this CVE