PT-2015-2772 · Microsoft · Sql Server

Published 2015-07-14 · Updated 2018-10-12 · CVE-2015-1762

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2008 SP3 through 2014

Description The issue is related to the lack of forced blocking of access to uninitialized memory areas in Microsoft SQL Server, allowing remote authenticated users to execute arbitrary code by making a crafted query. This can be achieved by leveraging certain permissions, such as the VIEW SERVER STATE permission. An attacker could exploit this issue if a privileged user runs a specially crafted query on an affected SQL server with specific permission settings turned on, potentially allowing the attacker to take complete control of the affected system.

Recommendations For Microsoft SQL Server versions 2008 SP3 through 2014, consider restricting access to the VIEW SERVER STATE permission to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid running specially crafted queries on affected SQL servers with special permission settings turned on. Restrict access to internal function calls that handle uninitialized memory to prevent potential exploitation.

Fix

RCE

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

BDU:2015-12137

CVE-2015-1762

Affected Products

Sql Server

References · 7

• https://bdu.fstec.ru/vul/2015-12137 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1762 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-1762 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058 · Vendor Advisory
• http://technet.microsoft.com/security/bulletin/ms15-058 · Note
• http://technet.microsoft.com/security/bulletin/MS15-058 · Note
• http://securitytracker.com/id/1032893 · Note