Lucene search

Tenable9828.PRM

HistoryDec 12, 2016 - 12:00 a.m.

Microsoft SQL Server 2014 12.0.2254.0 through 12.0.2546.0 Multiple Vulnerabilities (3045324)

2016-12-1200:00:00

Tenable

www.tenable.com

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

EPSS

0.06

Percentile

93.5%

JSON

The remote host is running a version of Microsoft SQL Server 2014 12.0.2254.0 through 12.0.2546.0 and is affected by multiple vulnerabilities :

An unspecified type-casting flaw exists. With a specially crafted query, an authenticated, remote attacker can potentially gain escalated privileges. (CVE-2015-1761)
An unspecified flaw exists related to use of uninitialized memory. With a specially crafted query, an authenticated, remote attacker can potentially execute arbitrary code on the system. (CVE-2015-1762, CVE-2015-1763)

Binary data 9828.prm

VendorProductVersionCPE
microsoftsql_server2014cpe:/a:microsoft:sql_server:2014

Vendor	Product	Version	CPE
microsoft	sql_server	2014	cpe:/a:microsoft:sql_server:2014

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1761

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1762

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1763

technet.microsoft.com/library/security/MS15-058

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

EPSS

0.06

Percentile

93.5%

JSON

Related for 9828.PRM