CVE-2018-8273

EPSS 28.62%
Veröffentlicht 15.08.2018 17:29:03
Zuletzt bearbeitet 21.11.2024 04:13:31
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Sql Server Version2016 Updatesp1 HwPlatformx64

Microsoft ≫ Sql Server Version2016 Updatesp2 HwPlatformx64

Microsoft ≫ Sql Server Version2017 HwPlatformx64

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	28.62%	0.963

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

http://www.securityfocus.com/bid/104967

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1041467

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-8273

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-8273

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-8273

EUVD