NetSight
high8.8

CVE-2024-37331

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Impact

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Affected products

VendorProductAffected versions
MicrosoftSql Server 2016
before 13.0.6441.1
from 13.0.7000.253 before 13.0.7037.1
MicrosoftSql Server 2017
before 14.0.2056.2
from 14.0.3456.2 before 14.0.3471.2
MicrosoftSql Server 2019
before 15.0.2116.2
from 15.0.4375.4 before 15.0.4382.1
MicrosoftSql Server 2022
before 16.0.1121.4
from 16.0.4125.3 before 16.0.4131.2

Weakness classification

References