Skip to content
7.8 High

CVE-2023-29356 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Description

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Affected products and versions

Product Affected versions Fixed in
Microsoft ODBC Driver 17 for SQL Server on Linux 17.0 17.0.0.0 → < 17.10.4.1 17.10.4.1
Microsoft ODBC Driver 18 for SQL Server on Linux 18.0 18.0.0.0 → < 18.2.1.1 18.2.1.1
Microsoft ODBC Driver 17 for SQL Server on Windows 17.0 17.0.0.0 → < 17.10.4.1 17.10.4.1
Microsoft ODBC Driver 18 for SQL Server on Windows 18.0 18.0.0.0 → < 18.2.2.1 18.2.2.1
Microsoft ODBC Driver 17 for SQL Server on MacOS 17.0 17.0.0.0 → < 17.10.4.1 17.10.4.1
Microsoft ODBC Driver 18 for SQL Server on MacOS 18.0 18.0.0.0 → < 18.2.1.1 18.2.1.1
Microsoft Visual Studio 2022 version 17.2 17.2 17.2.0 → < 17.2.23 17.2.23
Microsoft Visual Studio 2022 version 17.4 17.4 17.4.0 → < 17.4.15 17.4.15
Microsoft Visual Studio 2022 version 17.6 17.6 17.6.0 → < 17.6.11 17.6.11
Show the 2 other branches
Product Affected versions Fixed in
Microsoft Visual Studio 2022 version 17.8 17.8 17.8.0 → < 17.8.4 17.8.4
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) 16.11 16.11.0 → < 16.11.33 16.11.33

References

Timeline

  1. Published
  2. Last modified
The 23 CVEs of Microsoft ODBC Driver 17 for SQL Server on Linux →
Track this CVE