CVE-2019-1068: Microsoft SQL Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
Other sources
Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-1068?
CVE-2019-1068 is a remote code execution vulnerability in Microsoft SQL Server when it incorrectly handles processing of internal functions.
How does CVE-2019-1068 impact Microsoft SQL Server?
CVE-2019-1068 allows remote attackers to execute arbitrary code on the affected system.
What is the severity of CVE-2019-1068?
CVE-2019-1068 has a severity rating of 8.8, which is considered high.
Which versions of Microsoft SQL Server are affected by CVE-2019-1068?
CVE-2019-1068 affects Microsoft SQL Server 2014 SP2, 2014 SP3, 2016 SP1, 2016 SP2, and 2017.
How can I fix CVE-2019-1068?
To fix CVE-2019-1068, apply the necessary security updates provided by Microsoft.