10
CVE-2018-8273
- EPSS 19.44%
- Published 15.08.2018 17:29:03
- Last modified 21.11.2024 04:13:31
- Source secure@microsoft.com
- Teams watchlist Login
- Open Login
A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.
Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Sql Server Version2016 Updatesp1 HwPlatformx64
Microsoft ≫ Sql Server Version2016 Updatesp2 HwPlatformx64
Microsoft ≫ Sql Server Version2017 HwPlatformx64
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 19.44% | 0.951 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.