CVE-2023-38169

CWE-416 — Use After Free4 documents4 sources
Severity
8.8HIGH
EPSS
0.4%
top 40.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
13
Microsoft Microsoft Odbc Driver 17 FOR SQL Server ON LinuxMicrosoft Microsoft Odbc Driver 17 FOR SQL Server ON MacosMicrosoft Microsoft Odbc Driver 17 FOR SQL Server ON Windows+10 more
Timeline
PublishedAug 8

Description

Microsoft SQL OLE DB Remote Code Execution Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages13 packages

▶CVEListV5microsoft/microsoft_sql_server_2022_(cu_5)15.0.0 — 16.0.4053.3
▶CVEListV5microsoft/microsoft_sql_server_2019_(cu_21)15.0.0 — 15.0.4316.3
▶CVEListV5microsoft/microsoft_ole_db_driver_18_for_sql_server18.0.0 — 18.6.0006.0
▶CVEListV5microsoft/microsoft_ole_db_driver_19_for_sql_server19.0.0 — 19.3.0001.0

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-v2fp-mjm4-pj44: Microsoft OLE DB Remote Code Execution Vulnerability↗2023-08-08
▶
CVEList
Microsoft SQL OLE DB Remote Code Execution Vulnerability↗2023-08-08
▶

📋Vendor Advisories

1
Microsoft
Microsoft SQL OLE DB Remote Code Execution Vulnerability↗2023-08-08
▶
CVE-2023-38169 (HIGH CVSS 8.8) | Microsoft SQL OLE DB Remote Code Ex | cvebase.io