Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• osv-coords34 versions

  pkg:bitnami/dotnetpkg:bitnami/dotnet-sdkpkg:nuget/microsoft.data.sqlclientpkg:nuget/system.data.sqlclientpkg:rpm/almalinux/aspnetcore-runtime-6.0pkg:rpm/almalinux/aspnetcore-runtime-7.0pkg:rpm/almalinux/aspnetcore-runtime-8.0pkg:rpm/almalinux/aspnetcore-targeting-pack-6.0pkg:rpm/almalinux/aspnetcore-targeting-pack-7.0pkg:rpm/almalinux/aspnetcore-targeting-pack-8.0pkg:rpm/almalinux/dotnetpkg:rpm/almalinux/dotnet-apphost-pack-6.0pkg:rpm/almalinux/dotnet-apphost-pack-7.0pkg:rpm/almalinux/dotnet-apphost-pack-8.0pkg:rpm/almalinux/dotnet-hostpkg:rpm/almalinux/dotnet-hostfxr-6.0pkg:rpm/almalinux/dotnet-hostfxr-7.0pkg:rpm/almalinux/dotnet-hostfxr-8.0pkg:rpm/almalinux/dotnet-runtime-6.0pkg:rpm/almalinux/dotnet-runtime-7.0pkg:rpm/almalinux/dotnet-runtime-8.0pkg:rpm/almalinux/dotnet-sdk-6.0pkg:rpm/almalinux/dotnet-sdk-6.0-source-built-artifactspkg:rpm/almalinux/dotnet-sdk-7.0pkg:rpm/almalinux/dotnet-sdk-7.0-source-built-artifactspkg:rpm/almalinux/dotnet-sdk-8.0pkg:rpm/almalinux/dotnet-sdk-8.0-source-built-artifactspkg:rpm/almalinux/dotnet-targeting-pack-6.0pkg:rpm/almalinux/dotnet-targeting-pack-7.0pkg:rpm/almalinux/dotnet-targeting-pack-8.0pkg:rpm/almalinux/dotnet-templates-6.0pkg:rpm/almalinux/dotnet-templates-7.0pkg:rpm/almalinux/dotnet-templates-8.0pkg:rpm/almalinux/netstandard-targeting-pack-2.1

  >= 6.0.0, < 6.0.26+ 33 more

  • (no CPE)range: >= 6.0.0, < 6.0.26
  • (no CPE)range: >= 6.0.0, < 6.0.26
  • (no CPE)range: < 2.1.7
  • (no CPE)range: < 4.8.6
  • (no CPE)range: < 6.0.26-1.el9_3
  • (no CPE)range: < 7.0.15-1.el9_3
  • (no CPE)range: < 8.0.1-1.el8_9
  • (no CPE)range: < 6.0.26-1.el9_3
  • (no CPE)range: < 7.0.15-1.el9_3
  • (no CPE)range: < 8.0.1-1.el8_9
  • (no CPE)range: < 8.0.101-1.el8_9
  • (no CPE)range: < 6.0.26-1.el9_3
  • (no CPE)range: < 7.0.15-1.el9_3
  • (no CPE)range: < 8.0.1-1.el8_9
  • (no CPE)range: < 8.0.1-1.el8_9
  • (no CPE)range: < 6.0.26-1.el9_3
  • (no CPE)range: < 7.0.15-1.el9_3
  • (no CPE)range: < 8.0.1-1.el8_9
  • (no CPE)range: < 6.0.26-1.el9_3
  • (no CPE)range: < 7.0.15-1.el9_3
  • (no CPE)range: < 8.0.1-1.el8_9
  • (no CPE)range: < 6.0.126-1.el9_3
  • (no CPE)range: < 6.0.126-1.el9_3
  • (no CPE)range: < 7.0.115-1.el9_3
  • (no CPE)range: < 7.0.115-1.el9_3
  • (no CPE)range: < 8.0.101-1.el8_9
  • (no CPE)range: < 8.0.101-1.el8_9
  • (no CPE)range: < 6.0.26-1.el9_3
  • (no CPE)range: < 7.0.15-1.el9_3
  • (no CPE)range: < 8.0.1-1.el8_9
  • (no CPE)range: < 6.0.126-1.el9_3
  • (no CPE)range: < 7.0.115-1.el9_3
  • (no CPE)range: < 8.0.101-1.el8_9
  • (no CPE)range: < 8.0.101-1.el8_9
• Microsoft/Microsoft.Data.SqlClientcpe-rescue

  Range: 5.0
• Microsoft/.net Frameworkcpe-rescue6 versions

  2.0.0+ 5 more

  • (no CPE)range: 2.0.0
  • (no CPE)range: 4.7.0
  • (no CPE)range: 4.8.0
  • (no CPE)range: 4.8.1
  • (no CPE)range: 4.7.0
  • (no CPE)range: 4.8.0
• Microsoft/Microsoft SQL Server 2022 (CU 10)v5

  Range: 0
• Microsoft/Microsoft SQL Server 2022 (GDR)v5

  Range: 16.0.0
• Microsoft/Microsoft Visual Studio 2022 version 17.2v5

  Range: 17.2.0
• Microsoft/Microsoft Visual Studio 2022 version 17.4v5

  Range: 17.4.0
• Microsoft/Microsoft Visual Studio 2022 version 17.6v5

  Range: 17.6.0
• Microsoft/Microsoft Visual Studio 2022 version 17.8v5

  Range: 17.8.0
• Microsoft/.NET 6.0v5

  Range: 6.0.0
• Microsoft/.NET 7.0v5

  Range: 7.0.0
• Microsoft/.NET 8.0v5

  Range: 8.0
• Microsoft/System.Data.SqlClientcpe-rescue

  Range: 1.0

• github.com/advisories/GHSA-98g6-xh36-x2p7ghsaADVISORY
• msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0056ghsavendor-advisoryWEB
• nvd.nist.gov/vuln/detail/CVE-2024-0056ghsaADVISORY
• github.com/dotnet/announcements/issues/292ghsaWEB

No linked articles in our index yet.