CVE-2018-8273

Опубликовано: 15 авг. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.

Ссылки

http://www.securityfocus.com/bid/104967
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041467
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104967
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041467
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:sql_server:2016:sp1:*:*:*:*:x64:*

cpe:2.3:o:microsoft:sql_server:2016:sp2:*:*:*:*:x64:*

cpe:2.3:o:microsoft:sql_server:2017:*:*:*:*:*:x64:*

EPSS

Процентиль: 95%

0.19435

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2018-8273

msrc

около 7 лет назад

Microsoft SQL Server Remote Code Execution Vulnerability

GHSA-xq9g-9hx4-3c38

CVSS3: 9.8

github

больше 3 лет назад

BDU:2018-01029

CVSS3: 8.8

fstec