CVE-2023-23384: Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.1050.5Patch KB5021522 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.0.4280.7Patch KB5021124 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 13.0.7024.30Patch KB5021128 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 13.0.6430.49Patch KB5021129 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.6814.4Patch KB5020863 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 12.0.6174.8Patch KB5021045 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 12.0.6444.4Patch KB5021037 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.0.2101.7Patch KB5021125 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.0.3460.9Patch KB5021126 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.50.6785.2Patch KB5021112 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.0.2047.8Patch KB5021127 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 11.0.7512.11Patch KB5021123
Event History
Frequently Asked Questions
What is CVE-2023-23384?
CVE-2023-23384 is a remote code execution vulnerability in Microsoft SQL Server.
How severe is CVE-2023-23384?
CVE-2023-23384 has a severity level of high.
Which versions of SQL Server are affected by CVE-2023-23384?
SQL Server 2019, SQL Server 2022, SQL Server 2008, SQL Server 2017, SQL Server 2012, SQL Server 2019 (CU 18), SQL Server 2014, SQL Server 2008 R2 for 32-Bit Systems, SQL Server 2016 Azure Connectivity Pack, SQL Server 2016, SQL Server 2008 for x64-Based Systems, SQL Server 2008 R2 for x64-Based Systems, and SQL Server 2014 (CU 4) are affected by CVE-2023-23384.
How do I fix CVE-2023-23384?
To fix CVE-2023-23384, you can apply the patches or updates provided by Microsoft for the affected SQL Server versions. Refer to the Microsoft support links provided in the affected software section for specific remediation steps.
Where can I find more information about CVE-2023-23384?
You can find more information about CVE-2023-23384 on the Microsoft Security Response Center website.