Microsoft ODBC Driver for SQL Server RCE
CVE-2024-28934 Published on April 9, 2024

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Vendor Advisory NVD

Weakness Type

What is a Stack Overflow Vulnerability?

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVE-2024-28934 has been classified to as a Stack Overflow vulnerability or weakness.

Products Associated with CVE-2024-28934

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2024-28934 are published in these products:

Microsoft Visual Studio 2022

Microsoft Sql Server 2022

Microsoft Sql Server 2019

Microsoft Visual Studio 2019

Microsoft Odbc Driver For Sql Server

Affected Versions

Microsoft SQL Server 2022 for (CU 12):

Version 16.0.0 and below 16.0.4120.1 is affected.

Microsoft SQL Server 2019 (CU 25):

Version 15.0.0 and below 15.0.4360.2 is affected.

Microsoft SQL Server 2019 (GDR):

Version 15.0.0 and below 15.0.2110.4 is affected.

Microsoft SQL Server 2022 (GDR):

Version 16.0.0 and below 16.0.1115.1 is affected.

Microsoft ODBC Driver 17 for SQL Server on Windows:

Version 17.0.0.0 and below 17.10.6.1 is affected.

Microsoft ODBC Driver 17 for SQL Server on Linux:

Version 17.0.0.0 and below 17.10.6.1 is affected.

Microsoft ODBC Driver 17 for SQL Server on MacOS:

Version 17.0.0.0 and below 17.10.6.1 is affected.

Microsoft ODBC Driver 18 for SQL Server on Windows:

Version 18.0.0.0 and below 18.3.3.1 is affected.

Microsoft ODBC Driver 18 for SQL Server on Linux:

Version 18.0.0.0 and below 18.3.3.1 is affected.

Microsoft ODBC Driver 18 for SQL Server on MacOS:

Version 18.0.0.0 and below 18.3.3.1 is affected.

Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10):

Version 16.11.0 and below 16.11.35 is affected.

Microsoft Visual Studio 2022 version 17.4:

Version 17.4.0 and below 17.4.18 is affected.

Microsoft Visual Studio 2022 version 17.9:

Version 17.0 and below 17.9.6 is affected.

Microsoft Visual Studio 2022 version 17.6:

Version 17.6.0 and below 17.6.14 is affected.

Microsoft Visual Studio 2022 version 17.8:

Version 17.8.0 and below 17.8.9 is affected.

microsoft odbc_driver_for_sql_server:

Version 18.0 and below 18.3.3.1 is affected.

microsoft sql_server:

Version 15.0.2000.5 is affected.

Exploit Probability

EPSS

2.22%

Percentile

84.21%