CVE-2022-29143: Microsoft SQL Server Remote Code Execution Vulnerability

Published Jun 14, 2022
·
Updated

Microsoft SQL Server Remote Code Execution Vulnerability.

Affected Software

17 affected componentsFixes available
Microsoft SQL Server=2014-sp3
Microsoft SQL Server=2016-sp2
Microsoft SQL Server=2016-sp3
Microsoft SQL Server=2017
Microsoft SQL Server=2019
Microsoft SQL Server 2016<13.0.6419.1
13.0.6419.1
Microsoft SQL Server 2014<12.0.6439.10
12.0.6439.10
Microsoft SQL Server 2014<12.0.6169.19
12.0.6169.19
Microsoft SQL Server 2016 Azure Connect Feature Pack<13.0.7016.1
13.0.7016.1
Microsoft SQL Server 2019<15.0.4236.7
15.0.4236.7
Microsoft SQL Server 2016<13.0.5893.48
13.0.5893.48
Microsoft SQL Server 2019<15.0.2095.3
15.0.2095.3
Microsoft SQL Server 2014<12.0.6169.19
12.0.6169.19
Microsoft SQL Server 2014<12.0.6439.10
12.0.6439.10
Microsoft SQL Server 2017<14.0.3445.2
14.0.3445.2
Microsoft SQL Server 2016<13.0.5108.50
13.0.5108.50
Microsoft SQL Server 2017<14.0.2042.3
14.0.2042.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 13.0.6419.1Patch KB5014355
  2. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 12.0.6439.10Patch KB5014164
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 13.0.7016.1Patch KB5015371
  4. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 12.0.6169.19Patch KB5014165
  5. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 15.0.4236.7Patch KB5014353
  6. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 15.0.2095.3Patch KB5014356
  7. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 13.0.5893.48Patch KB5014351
  8. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 14.0.3445.2Patch KB5014553
  9. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 13.0.5108.50Patch KB5014365
  10. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 14.0.2042.3Patch KB5014354

Event History

Jun 14, 2022
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Jun 15, 2022
CVE Published
via MITRE·09:51 PM
Data Sourced
via MITRE·09:51 PM
DescriptionSeverity
Data Sourced
via NVD·10:15 PM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is CVE-2022-29143?

CVE-2022-29143 refers to a Microsoft SQL Server Remote Code Execution Vulnerability.

2

How severe is CVE-2022-29143?

CVE-2022-29143 is considered to be high severity with a severity value of 7.5.

3

Which versions of Microsoft SQL Server are affected by CVE-2022-29143?

CVE-2022-29143 affects Microsoft SQL Server 2014 SP3, 2016 SP2, 2016 SP3, 2017, and 2019.

4

How can I fix CVE-2022-29143?

To fix CVE-2022-29143, it is recommended to apply the latest security updates provided by Microsoft.

5

Where can I find more information about CVE-2022-29143?

You can find more information about CVE-2022-29143 on the Microsoft Security Guidance Advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29143

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203