CVE-2024-37980: Microsoft SQL Server Elevation of Privilege Vulnerability
Microsoft SQL Server Elevation of Privilege Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.4140.3Patch KB5042578 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 13.0.6445.1Patch KB5042207 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.0.3475.1Patch KB5042215 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.0.4390.2Patch KB5042749 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.1125.1Patch KB5042211 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.0.2120.1Patch KB5042214 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 13.0.7040.1Patch KB5042209 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.0.2060.1Patch KB5042217
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37980?
CVE-2024-37980 has been categorized as an elevation of privilege vulnerability, which can allow attackers to gain elevated access to system resources.
How do I fix CVE-2024-37980?
To fix CVE-2024-37980, update your SQL Server instances to the latest patches provided by Microsoft.
Which products are affected by CVE-2024-37980?
CVE-2024-37980 affects Microsoft SQL Server versions 2016, 2017, 2019, and 2022 across multiple configurations.
What types of attacks can leverage CVE-2024-37980?
CVE-2024-37980 can potentially be exploited by attackers to execute unauthorized operations on the affected SQL Server instances.
Are there known exploits for CVE-2024-37980?
As of now, there have been no public reports of active exploits targeting CVE-2024-37980, but it's advisable to apply patches promptly.