« Volver al listado

CVE-2024-37334

Estado: ModificadaAlta (8.8)—

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Microsoft — OLE DB Driver FOR SQL ServerMicrosoft — SQL Server 2019Microsoft — SQL Server 2022

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-37334",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-37334",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-24T20:28:50.890496Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secure@microsoft.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2019 (GDR)",
          "versions": [
            {
              "status": "affected",
              "version": "15.0.0",
              "lessThan": "15.0.2116.2",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2022 (GDR)",
          "versions": [
            {
              "status": "affected",
              "version": "16.0.0",
              "lessThan": "16.0.1121.4",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft OLE DB Driver 19 for SQL Server",
          "versions": [
            {
              "status": "affected",
              "version": "19.0.0",
              "lessThan": "19.3.0005.0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft OLE DB Driver 18 for SQL Server",
          "versions": [
            {
              "status": "affected",
              "version": "18.0.0",
              "lessThan": "18.7.0004.0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2022 for (CU 13)",
          "versions": [
            {
              "status": "affected",
              "version": "16.0.0",
              "lessThan": "16.0.4131.2",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2019 for x64-based Systems (CU 27)",
          "versions": [
            {
              "status": "affected",
              "version": "15.0.0",
              "lessThan": "15.0.4382.1",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        }
      ]
    }
  ],
  "published": "2024-07-09T17:15:22.730",
  "references": [
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37334",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37334",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secure@microsoft.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability"
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ejecución remota de código del controlador Microsoft OLE DB para SQL Server"
    }
  ],
  "lastModified": "2026-06-17T07:38:10.070",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:ole_db_driver_for_sql_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E39565B-DDE3-49F9-934D-87F6427417FB",
              "versionEndExcluding": "18.7.0004.0",
              "versionStartIncluding": "18.0.2"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:ole_db_driver_for_sql_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9AAD846F-9D05-44ED-B701-C1685BCBD709",
              "versionEndExcluding": "19.3.0005.0",
              "versionStartIncluding": "19.0.0"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8AE7C7AB-2B2B-4822-98BE-D1E7E53FFB4A",
              "versionEndExcluding": "15.0.2116.2"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA37D611-EA4F-4D4F-A79B-FE65726DE7E1",
              "versionEndExcluding": "15.0.4382.1",
              "versionStartIncluding": "15.0.4375.4"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A14154AC-1DC3-42B7-B45A-916C9ACFD237",
              "versionEndExcluding": "16.0.1121.4"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7391BD2B-431E-4F65-878A-1BE8D389B3FE",
              "versionEndExcluding": "16.0.4131.2",
              "versionStartIncluding": "16.0.4125.3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}