Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-0056

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Description

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft SQL Server 2022 (GDR)

  • 16.0.0 to < 16.0.1110.1affected

Microsoft .NET 6.0

  • 6.0.0 to < 6.0.26affected

Microsoft .NET 7.0

  • 7.0.0 to < 7.0.15affected

Microsoft .NET 8.0

  • 8.0 to < 8.0.1affected

Microsoft Microsoft.Data.SqlClient

  • 2.0 to < 2.1.7affected

Microsoft Microsoft.Data.SqlClient

  • 3.0 to < 3.1.5affected

Microsoft Microsoft.Data.SqlClient

  • 4.0 to < 4.0.5affected

Microsoft Microsoft.Data.SqlClient

  • 5.0 to < 5.1.3affected

Microsoft System.Data.SqlClient

  • 1.0 to < 4.8.6affected

Microsoft Microsoft Visual Studio 2022 version 17.2

  • 17.2.0 to < 17.2.23affected

Microsoft Microsoft Visual Studio 2022 version 17.4

  • 17.4.0 to < 17.4.15affected

Microsoft Microsoft Visual Studio 2022 version 17.6

  • 17.6.0 to < 17.6.11affected

Microsoft Microsoft Visual Studio 2022 version 17.8

  • 17.8.0 to < 17.8.4affected

Microsoft Microsoft SQL Server 2022 (CU 10)

  • 0 to < 16.0.4100.1affected

Microsoft Microsoft .NET Framework 4.8

  • 4.8.0 to < 4.8.04690.02affected

Microsoft Microsoft .NET Framework 3.5 AND 4.8

  • 4.8.0 to < 4.8.04690.02affected

Microsoft Microsoft .NET Framework 3.5 AND 4.7.2

  • 4.7.0 to < 4.7.04081.03affected

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2

  • 4.7.0 to < 4.7.04081.02affected

Microsoft Microsoft .NET Framework 3.5 AND 4.8.1

  • 4.8.1 to < 4.8.09214.01affected

Microsoft Microsoft .NET Framework 2.0 Service Pack 2

  • 2.0.0 to < 3.0.50727.8976affected

References