CVE-2023-21713: Microsoft SQL Server Remote Code Execution Vulnerability
First published: Tue Feb 14 2023(Updated: )
Microsoft SQL Server Remote Code Execution Vulnerability
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft SQL Server | =2012-sp4 | |
| Microsoft SQL Server | =2014-sp3 | |
| Microsoft SQL Server | =2016-sp3 | |
| Microsoft SQL Server | =2017 | |
| Microsoft SQL Server | =2019 | |
| Microsoft SQL Server | =2022 | |
| Microsoft SQL Server 2012 | ||
| Microsoft SQL Server 2012 | ||
| Microsoft SQL Server 2014 | ||
| Microsoft SQL Server 2016 Azure Connect Feature Pack | ||
| Microsoft SQL Server 2014 (CU 4) | ||
| Microsoft SQL Server 2019 | ||
| Microsoft SQL Server 2019 (CU 18) | ||
| Microsoft SQL Server 2017 | ||
| Microsoft SQL Server 2014 | ||
| Microsoft SQL Server 2017 (CU 31) | ||
| Microsoft SQL Server 2022 | ||
| Microsoft SQL Server 2016 | ||
| Microsoft SQL Server 2014 (CU 4) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-21713?
CVE-2023-21713 is a Microsoft SQL Server Remote Code Execution Vulnerability.
Which versions of Microsoft SQL Server are affected?
Microsoft SQL Server 2012 (sp4), 2014 (sp3), 2016 (sp3), 2017, 2019, and 2022 are affected.
What is the severity of CVE-2023-21713?
CVE-2023-21713 has a severity rating of 8.8 (high).
How can I fix CVE-2023-21713?
Apply the appropriate patches or updates provided by Microsoft for your version of SQL Server.
Where can I find more information about CVE-2023-21713?
You can find more information about CVE-2023-21713 on the Microsoft Security Response Center website.
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/title
- agent/severity
- agent/references
- agent/description
- collector/msrc-cve
- source/Microsoft
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft sql server
- version/microsoft sql server/2012-sp4
- version/microsoft sql server/2014-sp3
- version/microsoft sql server/2016-sp3
- version/microsoft sql server/2017
- version/microsoft sql server/2019
- version/microsoft sql server/2022
- canonical/microsoft sql server 2012
- canonical/microsoft sql server 2014
- canonical/microsoft sql server 2016 azure connect feature pack
- canonical/microsoft sql server 2014 (cu 4)
- canonical/microsoft sql server 2019
- canonical/microsoft sql server 2019 (cu 18)
- canonical/microsoft sql server 2017
- canonical/microsoft sql server 2017 (cu 31)
- canonical/microsoft sql server 2022
- canonical/microsoft sql server 2016