CVE-2023-29349

CWE-1914 documents4 sources
Severity
7.8HIGH
EPSS
0.6%
top 30.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
16
Microsoft Microsoft Odbc Driver 17 FOR SQL Server ON LinuxMicrosoft Microsoft Odbc Driver 17 FOR SQL Server ON MacosMicrosoft Microsoft Odbc Driver 17 FOR SQL Server ON Windows+13 more
Timeline
PublishedJun 16

Description

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages16 packages

▶NVDmicrosoft/odbc_driver17.0.1.1 — 17.10.4.1+1

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

2
CVEList
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability↗2023-06-16
▶
GHSA
GHSA-4qc2-x4jp-chwr: Microsoft ODBC and OLE DB Remote Code Execution Vulnerability↗2023-06-16
▶

📋Vendor Advisories

1
Microsoft
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability↗2023-06-13
▶
CVE-2023-29349 (HIGH CVSS 7.8) | Microsoft ODBC and OLE DB Remote Co | cvebase.io