Microsoft ODBC Driver for SQL Server RCE Remote Code Exec Vulnerability
CVE-2024-29043 Published on April 9, 2024

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Vendor Advisory NVD

Weakness Type

What is a Dangling pointer Vulnerability?

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

CVE-2024-29043 has been classified to as a Dangling pointer vulnerability or weakness.

Products Associated with CVE-2024-29043

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Sql Server 2022

Microsoft Sql Server 2019

Microsoft Odbc Driver For Sql Server

Affected Versions

Microsoft SQL Server 2022 for (CU 12):

Version 16.0.0 and below 16.0.4120.1 is affected.

Microsoft SQL Server 2019 (CU 25):

Version 15.0.0 and below 15.0.4360.2 is affected.

Microsoft SQL Server 2019 (GDR):

Version 15.0.0 and below 15.0.2110.4 is affected.

Microsoft SQL Server 2022 (GDR):

Version 16.0.0 and below 16.0.1115.1 is affected.

Microsoft ODBC Driver 17 for SQL Server on Windows:

Version 17.0.0.0 and below 17.10.6.1 is affected.

Microsoft ODBC Driver 17 for SQL Server on Linux:

Version 17.0.0.0 and below 17.10.6.1 is affected.

Microsoft ODBC Driver 17 for SQL Server on MacOS:

Version 17.0.0.0 and below 17.10.6.1 is affected.

Microsoft ODBC Driver 18 for SQL Server on Windows:

Version 18.0.0.0 and below 18.3.3.1 is affected.

Microsoft ODBC Driver 18 for SQL Server on Linux:

Version 18.0.0.0 and below 18.3.3.1 is affected.

Microsoft ODBC Driver 18 for SQL Server on MacOS:

Version 18.0.0.0 and below 18.3.3.1 is affected.

Exploit Probability

EPSS

3.99%

Percentile

88.25%