CVE-2023-28304: Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
First published: Tue Apr 11 2023(Updated: )
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft OLE DB Driver 18 for SQL Server | ||
| Microsoft OLE DB Driver 19 for SQL Server | ||
| Microsoft ODBC Driver 18 for SQL Server | ||
| Microsoft ODBC Driver 17 for SQL Server | ||
| Microsoft ODBC Driver 18 for SQL Server | ||
| Microsoft OLE DB Driver 18 for SQL Server | ||
| Microsoft Odbc | >=17.0<17.10.3.1 | |
| Microsoft Odbc | >=18.0<18.2.1.1 | |
| Microsoft Ole Db | >=18.0<18.6.5 | |
| Microsoft Ole Db | >=19.1.0<19.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-28304?
CVE-2023-28304 is a Microsoft ODBC and OLE DB Remote Code Execution Vulnerability.
How severe is CVE-2023-28304?
CVE-2023-28304 has a severity rating of 7.8 (high).
Which software is affected by CVE-2023-28304?
The software affected by CVE-2023-28304 includes Microsoft OLE DB Driver 18 for SQL Server, Microsoft OLE DB Driver 19 for SQL Server, Microsoft ODBC Driver 18 for SQL Server, and Microsoft ODBC Driver 17 for SQL Server.
How can I fix CVE-2023-28304?
To fix CVE-2023-28304, you should download and apply the patches provided by Microsoft for the affected software.
Where can I find more information about CVE-2023-28304?
You can find more information about CVE-2023-28304 on the Microsoft Security Response Center website.
- collector/msrc
- agent/author
- agent/type
- source/Microsoft
- collector/msrc-cve
- agent/softwarecombine
- agent/software-canonical-lookup
- agent/remedy
- agent/references
- agent/title
- agent/severity
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/description
- agent/event
- agent/last-modified-date
- agent/weakness
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft ole db driver 18 for sql server
- canonical/microsoft ole db driver 19 for sql server
- canonical/microsoft odbc driver 18 for sql server
- canonical/microsoft odbc driver 17 for sql server
- canonical/microsoft odbc
- version/microsoft odbc/17.0
- version/microsoft odbc/18.0
- canonical/microsoft ole db
- version/microsoft ole db/18.0
- version/microsoft ole db/19.1.0