Lucene search

CVE-2024-49007

🗓️ 12 Nov 2024 18:39:15Reported by microsoftType

SQL Server Client RCE Vulnerability CVE-2024-4900

Reporter	Title	Published	Views	Family All 12
Microsoft CVE	SQL Server Native Client Remote Code Execution Vulnerability	12 Nov 202408:00	–	mscve
Vulnrichment	CVE-2024-49007 SQL Server Native Client Remote Code Execution Vulnerability	12 Nov 202417:54	–	vulnrichment
NVD	CVE-2024-49007	12 Nov 202418:15	–	nvd
Cvelist	CVE-2024-49007 SQL Server Native Client Remote Code Execution Vulnerability	12 Nov 202417:54	–	cvelist
Microsoft KB	KB5046859 - Description of the security update for SQL Server 2019 GDR: November 12, 2024	12 Nov 202408:00	–	mskb
Microsoft KB	KB5046858 - Description of the security update for SQL Server 2017 CU31: November 12, 2024	12 Nov 202408:00	–	mskb
Microsoft KB	KB5046856 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: November 12, 2024	12 Nov 202408:00	–	mskb
Microsoft KB	KB5046855 - Description of the security update for SQL Server 2016 SP3 GDR: November 12, 2024	12 Nov 202408:00	–	mskb
Microsoft KB	KB5046857 - Description of the security update for SQL Server 2017 GDR: November 12, 2024	12 Nov 202408:00	–	mskb
Microsoft KB	KB5046860 - Description of the security update for SQL Server 2019 CU29: November 12, 2024	12 Nov 202408:00	–	mskb

Nvd

Vulners

Node

microsoft sql_server_2016Range13.0.6300.2–13.0.6455.2x64

microsoft sql_server_2016Range13.0.7000.253–13.0.7050.2x64

microsoft sql_server_2017Range14.0.1000.169–14.0.2070.1x64

microsoft sql_server_2017Range14.0.3006.16–14.0.3485.1x64

microsoft sql_server_2019Range15.0.2000.5–15.0.2130.3x64

microsoft sql_server_2019Range15.0.4003.23–15.0.4410.1x64

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SQL Server 2017 (GDR)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "14.0.0",
        "lessThan": "14.0.2070.1",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SQL Server 2019 (GDR)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.0.0",
        "lessThan": "15.0.2130.3",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SQL Server 2016 Service Pack 3 (GDR)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "13.0.0",
        "lessThan": "13.0.6455.2",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "13.0.0",
        "lessThan": "13.0.7050.2",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SQL Server 2017 (CU 31)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "14.0.0",
        "lessThan": "14.0.3485.1",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SQL Server 2019 (CU 29)",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "15.0.0",
        "lessThan": "15.0.4410.1",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49007

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Nov 2024 18:15Current

9High risk

Vulners AI Score9

CVSS38.8

EPSS0.001

SSVC

CWE-122