CVE-2022-29143: Microsoft SQL Server Remote Code Execution Vulnerability
Published Jun 14, 2022
·Updated
Microsoft SQL Server Remote Code Execution Vulnerability.
Affected Software
17 affected componentsFixes available
Microsoft SQL Server 2017 (CU 29)
Microsoft SQL Server 2016 Azure Connect Feature Pack
Microsoft SQL Server 2019 (CU 16)
Microsoft SQL Server 2016 (CU 17)
Microsoft SQL Server 2014 (CU 4)
Microsoft SQL Server 2014 (CU 4)
Microsoft SQL Server=2014-sp3
Microsoft SQL Server=2016-sp2
Microsoft SQL Server=2016-sp3
Microsoft SQL Server=2017
Microsoft SQL Server=2019
Microsoft SQL Server 2014
Microsoft SQL Server 2014
Microsoft SQL Server 2016
Microsoft SQL Server 2016
Microsoft SQL Server 2019
Microsoft SQL Server 2017
Remediation
Event History
Jun 14, 2022
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Jun 15, 2022
CVE Published
via MITRE·09:51 PM
Data Sourced
via MITRE·09:51 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2022-29143?
CVE-2022-29143 refers to a Microsoft SQL Server Remote Code Execution Vulnerability.
2
How severe is CVE-2022-29143?
CVE-2022-29143 is considered to be high severity with a severity value of 7.5.
3
Which versions of Microsoft SQL Server are affected by CVE-2022-29143?
CVE-2022-29143 affects Microsoft SQL Server 2014 SP3, 2016 SP2, 2016 SP3, 2017, and 2019.
4
How can I fix CVE-2022-29143?
To fix CVE-2022-29143, it is recommended to apply the latest security updates provided by Microsoft.
5
Where can I find more information about CVE-2022-29143?
You can find more information about CVE-2022-29143 on the Microsoft Security Guidance Advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29143