Known vulnerabilities in Microsoft ODBC Driver for SQL Server on Linux

Vendor: Microsoft
Software: Microsoft ODBC Driver for SQL Server on Linux
Software CPE: cpe:2.3:a:microsoft:odbc_driver_linux:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft ODBC Driver for SQL Server on Linux Microsoft ODBC Driver for SQL Server on Linux is affected by 18 known vulnerabilities: 18 high Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88315 - Integer underflow
CVE-2024-28933		 CWE-191 High
No
No
 - 09.04.2024 SB2024040976
#VU88314 - Integer underflow
CVE-2024-28930		 CWE-191 High
No
No
 - 09.04.2024 SB2024040976
#VU88312 - Heap-based Buffer Overflow
CVE-2024-28932		 CWE-122 High
No
No
 - 09.04.2024 SB2024040976
#VU88308 - Heap-based Buffer Overflow
CVE-2024-28943		 CWE-122 High
No
No
 - 09.04.2024 SB2024040976
#VU88306 - Heap-based Buffer Overflow
CVE-2024-28937		 CWE-122 High
No
No
 - 09.04.2024 SB2024040976
#VU88288 - Integer overflow
CVE-2024-28929		 CWE-190 High
No
No
 - 09.04.2024 SB2024040976
#VU88287 - Integer overflow
CVE-2024-28931		 CWE-190 High
No
No
 - 09.04.2024 SB2024040976
#VU88284 - Integer overflow
CVE-2024-28936		 CWE-190 High
No
No
 - 09.04.2024 SB2024040976
#VU88282 - Heap-based Buffer Overflow
CVE-2024-28935		 CWE-122 High
No
No
 - 09.04.2024 SB2024040976
#VU88281 - Use After Free
CVE-2024-29043		 CWE-416 High
No
No
 - 09.04.2024 SB2024040976
#VU88280 - Heap-based Buffer Overflow
CVE-2024-28941		 CWE-122 High
No
No
 - 09.04.2024 SB2024040976
#VU88279 - Out-of-bounds read
CVE-2024-28938		 CWE-125 High
No
No
 - 09.04.2024 SB2024040976
#VU88278 - Stack-based buffer overflow
CVE-2024-28934		 CWE-121 High
No
No
 - 09.04.2024 SB2024040976
#VU77449 - Improper input validation
CVE-2023-29349		 CWE-20 High
No
No
 17.10.4.1, 18.2.1.1 15.06.2023 SB2023061536
SB2024041517
#VU77447 - Improper input validation
CVE-2023-29356		 CWE-20 High
No
No
 17.10.4.1, 18.2.1.1 15.06.2023 SB2023061534
SB2024041517
#VU77446 - Improper input validation
CVE-2023-32027		 CWE-20 High
No
No
 17.10.4.1, 18.2.1.1 15.06.2023 SB2023061534
SB2024041517
#VU77445 - Improper input validation
CVE-2023-32026		 CWE-20 High
No
No
 17.10.4.1, 18.2.1.1 15.06.2023 SB2023061534
SB2024041517
#VU77444 - Improper input validation
CVE-2023-32025		 CWE-20 High
No
No
 17.10.4.1, 18.2.1.1 15.06.2023 SB2023061534
SB2024041517