Advisories · Technology

Microsoft SQL Server 2017 (CU 31).

Every CVE that names Microsoft SQL Server 2017 (CU 31) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-37320 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37319 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21425 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 for x64-based Systems (CU 27)
- Microsoft SQL Server 2022 for (CU 13)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21331 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21317 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21308 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21303 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2022 for (CU 13)
- Microsoft SQL Server 2019 for x64-based Systems (CU 27)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-20701 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-35272 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-35271 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37331 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37332 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37318 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 for x64-based Systems (CU 27)
- Microsoft SQL Server 2022 for (CU 13)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21428 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21415 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21414 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21398 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21373 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21335 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21333 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-21332 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38087 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38088 CVE record

CVSS 8.8 High

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2023-36728 CVE record

CVSS 5.5 Medium

Microsoft SQL Server Denial of Service Vulnerability
- Microsoft SQL Server 2019 (CU 22)
- Microsoft SQL Server 2022 (CU 8)
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-23384 CVE record

CVSS 7.3 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21713 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Insecure deserialization
Not analysed yet 14 Feb 2023
CVE-2023-21718 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 R2 Service Pack 3 (QFE)
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21705 CVE record

CVSS 8.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
- Microsoft SQL Server 2012 Service Pack 4 (QFE)
- Hard-coded credentials
Not analysed yet 14 Feb 2023
CVE-2023-21704 CVE record

CVSS 7.8 High

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2014 Service Pack 3 (CU 4)
- Microsoft SQL Server 2014 Service Pack 3 (GDR)
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21528 CVE record

CVSS 7.8 High

Microsoft SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2008 R2 Service Pack 3 (QFE)
- Microsoft SQL Server 2008 Service Pack 4 (QFE)
- Memory corruption
Not analysed yet 14 Feb 2023