CVE-2023-29349

ALTO 7.8CVE-2023-29349 · Published 16/06/2023 · updated 17/06/2026

En resumen

CVE-2023-29349 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a odbc driver for sql server (microsoft), ole db driver for sql server (microsoft), sql server (microsoft).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.60%, mayor que el 48.8% de las vulnerabilidades.
Solución: actualizar a 17.10.4.1, 18.2.1.1, 18.6.0006.0, 19.3.0001.0 o posterior.

Package	Affected versions	Patched versions
odbc driver for sql server microsoft	`≥ 17.0.1.1, < 17.10.4.1≥ 18.0.1.1, < 18.2.1.1`	`17.10.4.118.2.1.1`
ole db driver for sql server microsoft	`≥ 18.0.2, < 18.6.0006.0≥ 19.0.0, < 19.3.0001.0`	`18.6.0006.019.3.0001.0`
sql server microsoft	`= 2019= 2022`	No fix yet

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.