Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft Windows ODBC Driver. The following products and versions are affected:Windows...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The vulnerabilities allow a malicious person to carry out attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights Access to...

KLA20233 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

Fedora 37 : qt5-qtbase / qt6-qtbase (2023-f2965f082c)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-f2965f082c advisory. Fix a possible DOS involving the Qt SQL ODBC driver plugin. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Security Bulletin: A vulnerability in OpenSSL affects IBM InfoSphere Information Server (CVE-2022-0778)

Summary A vulnerability in OpenSSL used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-0778 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw in the BNmodsqrt function when parsing certificates. By using a specially-crafted...

Oracle MySQL ODBC and C++ Connectors (Jan 2023 CPU)

The versions of MySQL ODBC or C++ Connectors installed on the remote host are affected by a vulnerability in the Cyrus SASL component as referenced in the January 2023 CPU advisory. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows low privileged...

The vulnerability of the ODBC Agent component of the ColdFusion software platform allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the ODBC Agent component of the ColdFusion software platform relates to the execution of operations beyond the buffer boundaries when processing GIOP packets. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

CVE-2023-21732

Microsoft ODBC Driver Remote Code Execution Vulnerability...

Remote code execution

Microsoft ODBC Driver Remote Code Execution Vulnerability...

Microsoft ODBC Driver Remote Code Execution Vulnerability

...

January 10, 2023—KB5022340 (Monthly Rollup)

None None...

CVE-2023-21732

Technical details about CVE-2023-21732 are not publicly provided in the connected documents. Monitor for updates for affected products, versions, payloads, and mitigations as they become available.

KB5022339: Windows Server 2008 R2 Security Update (January 2023)

The remote Windows host is missing security update 5022339. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 -...

KB5022282: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (January 2023)

The remote Windows host is missing security update 5022282. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

KB5022303: Windows 11 Security Update (January 2023)

The remote Windows host is missing security update 5022303. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

CVE-2023-21732 Microsoft ODBC Driver Remote Code Execution Vulnerability

...

KB5022353: Windows Server 2008 Security Update (January 2023)

The remote Windows host is missing security update 5022353. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 -...

KB5022286: Windows 10 version 1809 / Windows Server 2019 Security Update (January 2023)

The remote Windows host is missing security update 5022286. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

KB5022346: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (January 2023)

The remote Windows host is missing security update 5022346. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

KB5022343: Windows Server 2012 Security Update (January 2023)

The remote Windows host is missing security update 5022343. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 -...