Lucene search

K
mscveMicrosoftMS:CVE-2023-36728
HistoryOct 10, 2023 - 7:00 a.m.

Microsoft SQL Server Denial of Service Vulnerability

2023-10-1007:00:00
Microsoft
msrc.microsoft.com
6
microsoft
sql
server
denial of service
vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

18.7%

Affected configurations

Vulners
Node
microsoftodbc_driver_18_for_sql_serverRange<18.3.2.1
OR
microsoftodbc_driver_18_for_sql_serverRange<18.3.2.1
OR
microsoftodbc_driver_18_for_sql_serverRange<18.3.2.1
OR
microsoftodbc_driver_17_for_sql_serverRange<17.10.5.1
OR
microsoftodbc_driver_17_for_sql_serverRange<17.10.5.1
OR
microsoftodbc_driver_17_for_sql_serverRange<17.10.5.1
OR
microsoftole_db_driver_18_for_sql_serverRange<18.6.0007.0
OR
microsoftole_db_driver_19_for_sql_serverRange<19.3.0002.0
OR
microsoftsql_serverRange<16.0.1105.1
OR
microsoftsql_serverRange<14.0.3465.1
OR
microsoftsql_serverRange<13.0.7029.3
OR
microsoftsql_serverRange<13.0.6435.1
OR
microsoftsql_serverRange<12.0.6449.1
OR
microsoftsql_serverRange<15.0.2104.1
OR
microsoftsql_serverRange<12.0.6449.1
OR
microsoftsql_serverRange<12.0.6179.1
OR
microsoftsql_serverRange<12.0.6179.1
OR
microsoftsql_serverRange<14.0.2052.1
OR
microsoftsql_serverRange<16.0.4080.1
OR
microsoftsql_serverRange<15.0.4326.1
VendorProductVersionCPE
microsoftodbc_driver_18_for_sql_server*cpe:2.3:a:microsoft:odbc_driver_18_for_sql_server:*:*:*:*:*:*:*:*
microsoftodbc_driver_17_for_sql_server*cpe:2.3:a:microsoft:odbc_driver_17_for_sql_server:*:*:*:*:*:*:*:*
microsoftole_db_driver_18_for_sql_server*cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:*:*:*:*:*:*:*:*
microsoftole_db_driver_19_for_sql_server*cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:*:*:*:*:*:*:*:*
microsoftsql_server*cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

18.7%