KB5029186 - Description of the security update for SQL Server 2016 SP3 GDR: October 10, 2023

None None...

KB5029378 - Description of the security update for SQL Server 2019 CU22: October 10, 2023

None None...

KB5029376 - Description of the security update for SQL Server 2017 CU31: October 10, 2023

None None...

KB5029377 - Description of the security update for SQL Server 2019 GDR: October 10, 2023

None None...

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

...

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

...

Vulnerabilities fixed in Microsoft SQL Server

Microsoft has fixed four vulnerabilities in OLEDB and the ODBC Driver. These components are used by clients to communicate with SQL Server. A malicious party could exploit the vulnerability to execute arbitrary code on the client that using them. The malicious party must trick the victim into...

PT-2023-6046 · Microsoft · Odbc Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ODBC Driver for SQL Server. This can allow an attacker to execute arbitrary code...

PT-2023-5971 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the OLE DB driver for Microsoft SQL Server, which can be exploited to execute arbitrary code. This allows an attacker t...

CVE-2023-36785: Integer Underflow (Wrap or Wraparound)

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-36420: Double Free

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-36577: Heap-based Buffer Overflow

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2023-36730: Heap-based Buffer Overflow

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

Microsoft ODBC Driver Security Vulnerability

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to remotely execute code...

CVE-2023-36728: Out-of-bounds Read

Microsoft SQL Server Denial of Service Vulnerability...

Microsoft SQL Server Security Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and versions are...

PT-2023-6045

Name of the Vulnerable Software and Affected Versions Microsoft ODBC Driver for SQL Server affected versions not specified Description The issue is related to insufficient input validation in the Microsoft ODBC Driver for SQL Server. This can allow an attacker to execute arbitrary code...

KLA61355 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft ODBC Driver for SQL Server can be...

KB5031411: Windows Server 2008 Security Update (October 2023)

The remote Windows host is missing security update 5031411. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-36577 - Windows IIS Server Elevation of Privilege Vulnerability CVE-2023-36434 - Microsof...