CVE-2023-36730: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Published Oct 10, 2023
·Updated
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected Software
22 affected componentsFixes available
Microsoft ODBC Driver 18 for SQL Server on MacOS
Microsoft ODBC Driver 17 for SQL Server on MacOS
Microsoft ODBC Driver 17 for SQL Server on Linux
Microsoft ODBC Driver 17 for SQL Server on Windows
Microsoft ODBC Driver 18 for SQL Server on Windows
Microsoft ODBC Driver 18 for SQL Server on Linux
Microsoft SQL Server 2022 (CU 8)
Microsoft SQL Server 2022 (CU 8)
Microsoft SQL Server 2019 (CU 22)
Microsoft SQL Server 2019 (CU 22)
Microsoft Odbc Driver For Sql Server Linux>=17.0<17.10.5.1
Microsoft Odbc Driver For Sql Server Macos>=17.0<17.10.5.1
Microsoft Odbc Driver For Sql Server Windows>=17.0<17.10.5.1
Microsoft Odbc Driver For Sql Server Linux>=18.0<18.3.2.1
Microsoft Odbc Driver For Sql Server Macos>=18.0<18.3.2.1
Microsoft Odbc Driver For Sql Server Windows>=18.0<18.3.2.1
Microsoft SQL Server=2019
Microsoft SQL Server=2022
Microsoft SQL Server 2022
Microsoft SQL Server 2022
Microsoft SQL Server 2019
Microsoft SQL Server 2019
Remediation
Event History
Oct 10, 2023
CVE Published
07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
CVE Published
via MITRE·05:07 PM
Data Sourced
via MITRE·05:07 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-36730?
CVE-2023-36730 is a remote code execution vulnerability in Microsoft ODBC Driver for SQL Server.
2
How severe is CVE-2023-36730?
CVE-2023-36730 has a severity score of 7.8 (high).
3
Which versions of Microsoft ODBC Driver for SQL Server are affected by CVE-2023-36730?
CVE-2023-36730 affects ODBC Driver 17 and 18 for SQL Server on MacOS, ODBC Driver 18 for SQL Server on Windows and Linux.
4
How can I fix CVE-2023-36730?
To fix CVE-2023-36730, apply the patches provided by Microsoft or follow the instructions in the provided URLs for each affected product.
5
Where can I find more information about CVE-2023-36730?
You can find more information about CVE-2023-36730 on the Microsoft Security Response Center website.