CVEvulnerability
CVE-2018-8273
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-08-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.
Affected configurations
• microsoft sql server 2016
• microsoft sql server 2017
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://www.securityfocus.com/bid/104967 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041467 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/104967 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041467 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273 Patch, Vendor Advisory