CVE-2024-0056

CVSS 8.7v3.1pub. 2024-01-09upd. 2024-11-21

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Microsoft Microsoft.data.sqlclient
APP
Microsoft
2.1 – 2.1.7 (excl.)3.1 – 3.1.5 (excl.)4.0 – 4.0.5 (excl.)5.1 – 5.1.3 (excl.)
Microsoft .net
APP
Microsoft
8.0.06.0.0 – 6.0.26 (excl.)7.0.0 – 7.0.15 (excl.)
Microsoft .net Framework
APP
Microsoft
2.03.54.6.24.74.7.14.7.24.8.14.8 – 4.8.04690.02 (excl.)4.8 – 4.8.04690.01 (excl.)
Microsoft SQL Server
APP
Microsoft
2022
Microsoft System.data.sqlclient
APP
Microsoft
< 4.8.6
Microsoft Visual Studio 2022
APP
Microsoft
17.2 – 17.2.23 (excl.)17.4 – 17.4.15 (excl.)17.6 – 17.6.11 (excl.)17.8 – 17.8.4 (excl.)
Microsoft Windows 10 1607
OS
Microsoft
all versions
Microsoft Windows 10 1809
OS
Microsoft
all versions
Microsoft Windows 10 21h2
OS
Microsoft
all versions
Microsoft Windows 10 22h2
OS
Microsoft
all versions
Microsoft Windows 11 21h2
OS
Microsoft
all versions
Microsoft Windows 11 22h2
OS
Microsoft
all versions
Microsoft Windows 11 23h2
OS
Microsoft
all versions
Microsoft Windows Server 2008
OS
Microsoft
r2
Microsoft Windows Server 2012
OS
Microsoft
r2
Microsoft Windows Server 2016
OS
Microsoft
all versions
Microsoft Windows Server 2019
OS
Microsoft
all versions
Microsoft Windows Server 2022
OS
Microsoft
all versions
Microsoft Windows Server 2022 23h2
OS
Microsoft
all versions