VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026

CVE-2024-28943

CVE-2024-28943

Description

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Affected products

16
  • Microsoft/Microsoft SQL Server 2019 (GDR)v5
    Range: 15.0.0
  • Microsoft/Microsoft SQL Server 2022 (GDR)v5
    Range: 16.0.0
  • Microsoft/Microsoft ODBC Driver 17 for SQL Server on Windowsv5
    Range: 17.0.0.0
  • Microsoft/Microsoft ODBC Driver 17 for SQL Server on Linuxv5
    Range: 17.0.0.0
  • Microsoft/Microsoft ODBC Driver 17 for SQL Server on MacOSv5
    Range: 17.0.0.0
  • Microsoft/Microsoft ODBC Driver 18 for SQL Server on Windowsv5
    Range: 18.0.0.0
  • Microsoft/Microsoft ODBC Driver 18 for SQL Server on Linuxv5
    Range: 18.0.0.0
  • Microsoft/Microsoft ODBC Driver 18 for SQL Server on MacOSv5
    Range: 18.0.0.0
  • Microsoft/Microsoft SQL Server 2019 (CU 25)v5
    Range: 15.0.0
  • Microsoft/Microsoft SQL Server 2022 for (CU 12)v5
    Range: 16.0.0
  • Microsoft/Odbc Driver For SQL Serverllm-fuzzy4 versions
    (expand)+ 3 more
    • (no CPE)
    • cpe:2.3:a:microsoft:odbc_driver_for_sql_server:*:*:*:*:*:linux:*:*range: >=17.0.1.1,<17.10.6.1
    • cpe:2.3:a:microsoft:odbc_driver_for_sql_server:*:*:*:*:*:macos:*:*range: >=17.0.1.1,<17.10.6.1
    • cpe:2.3:a:microsoft:odbc_driver_for_sql_server:*:*:*:*:*:windows:*:*range: >=17.0.1.1,<17.10.6.1
  • Microsoft/SQL Server2 versions
    cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*range: >=15.0.2000.5,<15.0.2110.4
    • cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*range: >=16.0.1000.6,<16.0.1115.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.