CVE-2019-1068

Quick assessment

Copy summary Copy citation

Affected

Microsoft Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)

Exploitation

Confirmed exploitation in the wild; remediate immediately

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft SQL Server是美国微软（Microsoft）公司的一套应用在Microsoft Windows系统下的大型商业数据库系统。 Microsoft SQL Server中存在远程代码执行漏洞。攻击者可通过提交特制的查询利用该漏洞在SQL Server Database Engine服务账户的上下文中执行代码。以下产品及版本受到影响：Microsoft SQL Server 2014 SP2，Microsoft SQL Server 2014 SP3，Microsoft SQL Se

CVE-2019-1068 affects Microsoft Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR). Confirmed exploitation in the wild; remediate immediately. Microsoft SQL Server是美国微软（Microsoft）公司的一套应用在Microsoft Windows系统下的大型商业数据库系统。 Microsoft SQL Server中存在远程代码执行漏洞。攻击者可通过提交特制的查询利用该漏洞在SQL Server Database Engine服务账户的上下文中执行代码。以下产品及版本受到影响：M CVE-2019-1068 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2019-1068

I. Basic Information for CVE-2019-1068

Affected Products

II. Public POCs for CVE-2019-1068

III. Intelligence Information for CVE-2019-1068

Vendor Advisories for CVE-2019-1068 (1)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2019-1068

Same Patch Batch · Microsoft · 2019-07-15 · 43 CVEs total

Showing top 20 of 43 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2019-1068