Summary
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Products covered
Microsoft SQL Server 2017 for x64-based Systems (GDR)
Microsoft SQL Server 2022 for x64-based Systems (GDR)
Microsoft SQL Server 2025 for x64-based Systems (GDR)
Microsoft SQL Server 2022 for x64-based Systems (CU27)
Microsoft SQL Server 2019 for x64-based Systems (CU32)
Microsoft SQL Server 2017 for x64-based Systems (CU31)
Microsoft SQL Server 2019 for x64-based Systems (GDR)
Microsoft SQL Server 2025 for x64-based Systems CU10
Remediation
Install KB5132749. Install KB5132747. Install KB5132748. Install KB5129300. Install KB5132745. Install KB5132746. Install KB5132751. Install KB5129299.
Vendor-listed fixes
14.0.2150.2
16.0.1220.3
17.0.1155.3
16.0.4315.2
15.0.4510.2
14.0.3570.2
15.0.2210.4
17.0.5045.3
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.