CVE-2024-43474

Published: Sep 10, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Microsoft SQL Server Information Disclosure Vulnerability

Affected (3)

Products: Microsoft: Sql Server 2017, Sql Server 2019

2 products

Sql Server 2017

Sql Server 2019

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Sql Server 2017	From 14.0.1000.169 to 14.0.2060.1
Microsoft Sql Server 2017	From 14.0.3006.16 to 14.0.3475.1
Microsoft Sql Server 2019	From 15.0.2000.5 to 15.0.2120.1

Related CWEs

Improper Null Termination

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43474

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.