← CVE Intelligence

CVE-2023-29349

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / Microsoft OLE DB Driver 18 for SQL Server	affected 18.0.0 before 18.6.0006.0
Microsoft / Microsoft OLE DB Driver 19 for SQL Server	affected 19.0.0 before 19.3.0001.0
Microsoft / Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	affected 16.11.0 before 16.11.33
Microsoft / Microsoft Visual Studio 2022 version 17.2	affected 17.2.0 before 17.2.23
Microsoft / Microsoft Visual Studio 2022 version 17.4	affected 17.4.0 before 17.4.15
Microsoft / Microsoft Visual Studio 2022 version 17.6	affected 17.6.0 before 17.6.11
Microsoft / Microsoft Visual Studio 2022 version 17.8	affected 17.8.0 before 17.8.4
Microsoft / Microsoft ODBC Driver 18 for SQL Server on MacOS	affected 18.0.0.0 before 18.2.1.1
Microsoft / Microsoft ODBC Driver 18 for SQL Server on Linux	affected 18.0.0.0 before 18.2.1.1
Microsoft / Microsoft ODBC Driver 17 for SQL Server on MacOS	affected 17.0.0.0 before 17.10.4.1
Microsoft / Microsoft ODBC Driver 17 for SQL Server on Linux	affected 17.0.0.0 before 17.10.4.1
Microsoft / Microsoft ODBC Driver 18 for SQL Server on Windows	affected 18.0.0.0 before 18.2.2.1
Microsoft / Microsoft ODBC Driver 17 for SQL Server on Windows	affected 17.0.0.0 before 17.10.4.1

CWE

CWE-191

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29349

ADP enrichment

CVE

No English description supplied.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29349

CISA-ADP

No English description supplied.

No references supplied.