← CVE Intelligence

CVE-2024-37328

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / productVersions
Microsoft / Microsoft SQL Server 2017 (GDR)affected 14.0.0 before 14.0.2056.2
Microsoft / Microsoft SQL Server 2019 (GDR)affected 15.0.0 before 15.0.2116.2
Microsoft / Microsoft SQL Server 2016 Service Pack 3 (GDR)affected 13.0.0 before 13.0.6441.1
Microsoft / Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Packaffected 13.0.0 before 13.0.7037.1
Microsoft / Microsoft SQL Server 2017 (CU 31)affected 14.0.0 before 14.0.3471.2
Microsoft / Microsoft SQL Server 2022 (GDR)affected 16.0.0 before 16.0.1121.4
Microsoft / Microsoft SQL Server 2019 for x64-based Systems (CU 27)affected 15.0.0 before 15.0.4382.1
Microsoft / Microsoft SQL Server 2022 for (CU 13)affected 16.0.0 before 16.0.4131.2

CWE

CWE-122

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.