Aller au contenu
en Se connecter
7.8 Élevée

CVE-2023-36420 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Description

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Produits et versions touchés

Produit Versions touchées Corrigé en
Microsoft SQL Server 2019 (GDR) 15.0 15.0.0 → < 15.0.2104.1 15.0.2104.1
Microsoft SQL Server 2022 (GDR) 16.0 16.0.0 → < 16.0.1105.1 16.0.1105.1
Microsoft ODBC Driver 17 for SQL Server on Windows 17.0 17.0.0.0 → < 17.10.5.1 17.10.5.1
Microsoft ODBC Driver 17 for SQL Server on Linux 17.0 17.0.0.0 → < 17.10.5.1 17.10.5.1
Microsoft ODBC Driver 17 for SQL Server on MacOS 17.0 17.0.0.0 → < 17.10.5.1 17.10.5.1
Microsoft ODBC Driver 18 for SQL Server on Windows 18.0 18.0.0.0 → < 18.3.2.1 18.3.2.1
Microsoft ODBC Driver 18 for SQL Server on Linux 18.0 18.0.0.0 → < 18.3.2.1 18.3.2.1
Microsoft ODBC Driver 18 for SQL Server on MacOS 18.0 18.0.0.0 → < 18.3.2.1 18.3.2.1
Microsoft SQL Server 2022 (CU 8) 15.0 15.0.0 → < 16.0.4080.1 16.0.4080.1
Afficher l’autre branche
Produit Versions touchées Corrigé en
Microsoft SQL Server 2019 (CU 22) 15.0 15.0.0 → < 15.0.4326.1 15.0.4326.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Microsoft SQL Server 2019 (GDR)

Les 222 CVE de Microsoft SQL Server 2019 (GDR) →
CVE-2026-94512 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network 8.8 Élevée CVE-2026-94520 Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network 4.9 Moyenne CVE-2026-88086 Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network 5.3 Moyenne CVE-2026-88088 Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally 7.0 Élevée
Suivre cette CVE