CVE:CVE-2023-38169
CNNVD:CNNVD-202308-701
Microsoft OLE DB Provider for SQL Server是美国微软（Microsoft）公司的一种 API。允许以统一的方式访问来自各种来源的数据。
Microsoft OLE DB Provider for SQL Server存在安全漏洞。攻击者利用该漏洞可以远程执行代码。以下产品和版本受到影响：Microsoft ODBC Driver 18 for SQL Server on MacOS,Microsoft SQL Server 2019 for x64-based Systems (CU 21),Microsoft ODBC Driver 17 for SQL Server on Windows,Microsoft ODBC Driver 18 for SQL Server on Windows,Microsoft ODBC Driver 18 for SQL Server on Linux,Microsoft ODBC Driver 17 for SQL Server on MacOS,Microsoft SQL Server 2022 for x64-based Systems (CU 5),Microsoft ODBC Driver 17 for SQL Server on Linux,Microsoft OLE DB Driver 19 for SQL Server,Microsoft OLE DB Driver 18 for SQL Server。
solution:Upgrade microsoft odbc_driver_for_sql_server to a higher version than 17.0.1.1,17.10.3.1,17.10.4.1,18.0.1.1,18.1.2.1,18.2.1.1,and avoid the version 17.0.1.1,17.10.3.1,17.10.4.1,18.0.1.1,18.1.2.1,18.2.1.1; Upgrade microsoft ole_db_driver_for_sql_server to a higher version than 18.0.2,18.1.0,18.2.1,18.2.2,18.2.3,18.3.0,18.4.0,18.5.0,18.6.0,19.0.0,19.1.0,19.2.0,19.3.0,19.3.1,and avoid the version 18.0.2,18.1.0,18.2.1,18.2.2,18.2.3,18.3.0,18.4.0,18.5.0,18.6.0,19.0.0,19.1.0,19.2.0,19.3.0,19.3.1; Upgrade microsoft sql_server to a higher version than 2019,2022,and avoid the version 2019,2022