← CVE Intelligence

CVE-2024-28941

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / Microsoft SQL Server 2019 (GDR)	affected 15.0.0 before 15.0.2110.4
Microsoft / Microsoft SQL Server 2022 (GDR)	affected 16.0.0 before 16.0.1115.1
Microsoft / Microsoft ODBC Driver 17 for SQL Server on Windows	affected 17.0.0.0 before 17.10.6.1
Microsoft / Microsoft ODBC Driver 17 for SQL Server on Linux	affected 17.0.0.0 before 17.10.6.1
Microsoft / Microsoft ODBC Driver 17 for SQL Server on MacOS	affected 17.0.0.0 before 17.10.6.1
Microsoft / Microsoft ODBC Driver 18 for SQL Server on Windows	affected 18.0.0.0 before 18.3.3.1
Microsoft / Microsoft ODBC Driver 18 for SQL Server on Linux	affected 18.0.0.0 before 18.3.3.1
Microsoft / Microsoft ODBC Driver 18 for SQL Server on MacOS	affected 18.0.0.0 before 18.3.3.1
Microsoft / Microsoft SQL Server 2019 (CU 25)	affected 15.0.0 before 15.0.4360.2
Microsoft / Microsoft SQL Server 2022 for (CU 12)	affected 16.0.0 before 16.0.4120.1

CWE

CWE-122

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28941

ADP enrichment

CVE

No English description supplied.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28941

CISA-ADP

No English description supplied.

No references supplied.