Home

Description

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

PUBLISHED Reserved 2024-06-05 | Published 2024-09-10 | Updated 2024-12-31 | Assigner microsoft




HIGH: 7.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C

Problem types

CWE-125: Out-of-bounds Read

Product status

15.0.0 (custom) before 15.0.4390.2
affected

16.0.0 (custom) before 16.0.4140.3
affected

14.0.0 (custom) before 14.0.2060.1
affected

15.0.0 (custom) before 15.0.2120.1
affected

14.0.0 (custom) before 14.0.3475.1
affected

16.0.0 (custom) before 16.0.1125.1
affected

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37342 (Microsoft SQL Server Native Scoring Information Disclosure Vulnerability) vendor-advisory

cve.org (CVE-2024-37342)

nvd.nist.gov (CVE-2024-37342)

Download JSON