title: Microsoft SQL Server Denial of Service Vulnerability
description: Microsoft SQL Server Denial of Service Vulnerability
problem types: Denial of Service
affected:
{
vendor: Microsoft
product: Microsoft SQL Server 2019 (CU 22)
cpes: cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 15.0.0, lessThan: 15.0.4326.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2022 (CU 8)
cpes: cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 15.0.0, lessThan: 16.0.4080.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2017 (GDR)
cpes: cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 14.0.0, lessThan: 14.0.2052.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2014 Service Pack 3 (GDR)
cpes: [ cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x64:*,  cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x86:*]
platforms: [x64-based Systems, 32-bit Systems]
versions:
version: 12.0.0, lessThan: 12.0.6179.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2014 Service Pack 3 (CU 4)
cpes: [ cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x86:*,  cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x64:*]
platforms: [32-bit Systems, x64-based Systems]
versions:
version: 12.0.0, lessThan: 12.0.6449.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2019 (GDR)
cpes: cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 15.0.0, lessThan: 15.0.2104.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2016 Service Pack 3 (GDR)
cpes: cpe:2.3:a:microsoft:sql_server:2016:sp3:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 13.0.0, lessThan: 13.0.6435.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
cpes: cpe:2.3:a:microsoft:sql_server:2016:sp3:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 13.0.0, lessThan: 13.0.7029.3, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2017 (CU 31)
cpes: cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 14.0.0, lessThan: 14.0.3465.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
cpes: cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*
platforms: x64-based Systems
versions:
version: 16.0.0, lessThan: 16.0.1105.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft OLE DB Driver 19 for SQL Server
cpes: cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:-:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 19.0.0, lessThan: 19.3.0002.0, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft OLE DB Driver 18 for SQL Server
cpes: cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:-:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 18.0.0, lessThan: 18.6.0007.0, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Windows
cpes: cpe:2.3:a:microsoft:odbc_driver_17_for_sql_server:-:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 17.0.0.0, lessThan: 17.10.5.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on Linux
cpes: cpe:2.3:a:microsoft:odbc_driver_17_for_sql_server:-:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 17.0.0.0, lessThan: 17.10.5.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft ODBC Driver 17 for SQL Server on MacOS
cpes: cpe:2.3:a:microsoft:odbc_driver_17_for_sql_server:-:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 17.0.0.0, lessThan: 17.10.5.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Windows
cpes: cpe:2.3:a:microsoft:odbc_driver_18_for_sql_server:-:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 18.0.0.0, lessThan: 18.3.2.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on Linux
cpes: cpe:2.3:a:microsoft:odbc_driver_18_for_sql_server:-:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 18.0.0.0, lessThan: 18.3.2.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft ODBC Driver 18 for SQL Server on MacOS
cpes: cpe:2.3:a:microsoft:odbc_driver_18_for_sql_server:-:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 18.0.0.0, lessThan: 18.3.2.1, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
]