← CVE Intelligence

CVE-2023-38169

Microsoft SQL OLE DB Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / Microsoft ODBC Driver 17 for SQL Server on Linux	affected 17.0.0.0 before 17.10.4.1
Microsoft / Microsoft ODBC Driver 17 for SQL Server on MacOS	affected 17.0.0.0 before 17.10.4.1
Microsoft / Microsoft ODBC Driver 17 for SQL Server on Windows	affected 17.0.0.0 before 17.10.4.1
Microsoft / Microsoft ODBC Driver 18 for SQL Server on Linux	affected 18.0.0.0 before 18.2.1.1
Microsoft / Microsoft ODBC Driver 18 for SQL Server on MacOS	affected 18.0.0.0 before 18.2.1.1
Microsoft / Microsoft ODBC Driver 18 for SQL Server on Windows	affected 18.0.0.0 before 18.2.2.1
Microsoft / Microsoft OLE DB Driver 18 for SQL Server	affected 18.0.0 before 18.6.0006.0
Microsoft / Microsoft OLE DB Driver 19 for SQL Server	affected 19.0.0 before 19.3.0001.0
Microsoft / Microsoft SQL Server 2019 (CU 21)	affected 15.0.0 before 15.0.4316.3
Microsoft / Microsoft SQL Server 2022 (CU 5)	affected 15.0.0 before 16.0.4053.3

CWE

CWE-416

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38169

ADP enrichment

CVE

No English description supplied.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38169

CISA-ADP

No English description supplied.

No references supplied.