Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft SQL Server 2008 Service Pack 4 (QFE) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2012 Service Pack 4 (QFE) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2017 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2008 R2 Service Pack 3 (QFE) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 (CU 4) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2019 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2016 Service Pack 3 (GDR) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2017 (CU 31) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2019 (CU 18) | affected |
|
||||||
| Microsoft | Microsoft SQL Server 2022 (GDR) | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-27484 | Microsoft SQL Server Remote Code Execution Vulnerability |
Mon, 02 Nov 2026 23:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Mon, 02 Nov 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:sql_server:*:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:*:-:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:*:r2_sp2:x86:*:*:*:*:* cpe:2.3:a:microsoft:sql_server:*:sp3:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:*:sp4:*:*:*:*:*:* cpe:2.3:a:microsoft:sql_server:*:sp4:*:*:*:*:x86:* cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x64:* cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x86:* |
Wed, 01 Jan 2025 01:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:x86:* cpe:2.3:a:microsoft:sql_server:2008:r2_sp2:x64:*:*:*:*:* cpe:2.3:a:microsoft:sql_server:2008:r2_sp2:x86:*:*:*:*:* cpe:2.3:a:microsoft:sql_server:2008:sp4:*:*:*:*:x86:* cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:* |
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2026-11-02T22:30:43.026Z
Reserved: 2023-01-11T22:08:03.134Z
Link: CVE-2023-23384
Vulnrichment
Updated: 2024-08-02T10:28:40.757Z
NVD
Status : Modified
Published: 2023-04-11T21:15:18.047
Modified: 2026-11-02T23:17:15.090
Link: CVE-2023-23384
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-122
Heap-based Buffer Overflow
- NVD-CWE-noinfo