CVE-2024-20701

Published: Jul 9, 2024Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Affected (8)

Products: Microsoft: Sql Server 2016, Sql Server 2017, Sql Server 2019, Sql Server 2022

4 products

Sql Server 2016

Sql Server 2017

Sql Server 2019

Sql Server 2022

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Microsoft Sql Server 2016	Version 13.0.6441.1
Microsoft Sql Server 2016	Version 13.0.7037.1
Microsoft Sql Server 2017	Version 14.0.2056.2
Microsoft Sql Server 2017	Version 14.0.3471.2
Microsoft Sql Server 2019	Version 15.0.2116.2
Microsoft Sql Server 2019	Version 15.0.4382.1
Microsoft Sql Server 2022	Version 16.0.1121.4
Microsoft Sql Server 2022	Version 16.0.4131.2

Related CWEs

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20701

Source: secure@microsoft.com

PatchVendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20701

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.