PT-2023-5971 · Microsoft · Sql Server

·

CVE-2023-36417

·

تاريخ النشر

2023-10-10

·

تاريخ التحديث

2024-05-29

CVSS v3.1

7.8

عالية

المتجهAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server (affected versions not specified)
Description The issue is related to insufficient input validation in the OLE DB driver for Microsoft SQL Server, which can be exploited to execute arbitrary code. This allows an attacker to potentially compromise the system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Heap Based Buffer Overflow

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

BDU:2023-06672
CVE-2023-36417

المنتجات المتأثرة

Sql Server