← CVE Intelligence

CVE-2023-21718

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / Microsoft SQL Server 2008 R2 Service Pack 3 (QFE)	affected 10.0.0 before 10.50.6785.2
Microsoft / Microsoft SQL Server 2008 Service Pack 4 (QFE)	affected 10.0.0 before 10.0.6814.4
Microsoft / Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)	affected 11.0.0 before 11.0.7512.11
Microsoft / Microsoft SQL Server 2012 Service Pack 4 (QFE)	affected 11.0.0 before 11.0.7512.11
Microsoft / Microsoft SQL Server 2014 Service Pack 3 (CU 4)	affected 12.0.0 before 12.0.6174.8
Microsoft / Microsoft SQL Server 2014 Service Pack 3 (GDR)	affected 12.0.0 before 12.0.6444.4
Microsoft / Microsoft SQL Server 2016 Service Pack 3 (GDR)	affected 13.0.0 before 13.0.6430.49
Microsoft / Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack	affected 13.0.0 before 13.0.7024.30
Microsoft / Microsoft SQL Server 2017 (CU 31)	affected 14.0.0 before 14.0.3460.9
Microsoft / Microsoft SQL Server 2017 (GDR)	affected 14.0.0 before 14.0.2047.8
Microsoft / Microsoft SQL Server 2019 (CU 18)	affected 15.0.0 before 15.0.4280.7
Microsoft / Microsoft SQL Server 2019 (GDR)	affected 15.0.0 before 15.0.2101.7
Microsoft / Microsoft SQL Server 2022 (GDR)	affected 16.0.0 before 16.0.1050.5

CWE

CWE-191

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21718

ADP enrichment

CVE

No English description supplied.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21718

CISA-ADP

No English description supplied.

No references supplied.