KB4293805 - Description of the security update for the remote code execution vulnerability in SQL Server 2017 (CU): August 14, 2018

🗓️ 14 Aug 2018 07:00:00Reported by MicrosoftType

A buffer overflow vulnerability exists in the Microsoft SQL Server allowing remote code execution in SQL Server 2017 (CU) from August 14, 2018. Must run script for **Query Store** when updating from SQL Server 2017 CU2 directly to CU3 or later

Reporter	Title	Published	Views	Family All 23
BDU FSTEC	The vulnerability of the SQL Server database management system, caused by buffer overflows, allows attackers to execute arbitrary code.	23 Aug 201800:00	–	bdu_fstec
Circl	CVE-2018-8273	14 Nov 202406:07	–	circl
CNVD	Microsoft SQL Server Buffer Overflow Vulnerability	15 Aug 201800:00	–	cnvd
CVE	CVE-2018-8273	15 Aug 201817:00	–	cve
Cvelist	CVE-2018-8273	15 Aug 201817:00	–	cvelist
Microsoft KB	KB4293802 - Description of the security update for the Remote Code Execution vulnerability in SQL Server 2016 SP2 (GDR): August 14, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	KB4293803 - Description of the security update for the Remote Code Execution vulnerability in SQL Server 2017 (GDR): August 14, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	KB4293808 - Description of the security update for the remote code execution vulnerability in SQL Server 2016 SP1 (CU): August 14, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	KB4458621 - Description of the security update for the Remote Code Execution vulnerability in SQL Server 2016 SP2 (CU): August 21, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	KB4458842 - Description of the security update for the remote code execution vulnerability in SQL Server 2016 SP1 (GDR): August 22, 2018	14 Aug 201807:00	–	mskb

14 Aug 2018 07:00Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

CVSS 210

EPSS0.29208