PT-2018-1478 · Microsoft · Sql Server

Published 2018-08-14 · Updated 2025-12-13 · CVE-2018-8273

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server (affected versions not specified)

Description A buffer overflow issue exists that could allow remote code execution on an affected system. An attacker who successfully exploits this issue could execute code in the context of the SQL Server Database Engine service account. To exploit the issue, an attacker would need to submit a specially crafted query to an affected SQL server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BDU:2018-01029

CVE-2018-8273

Affected Products

Sql Server

References · 10

• https://bdu.fstec.ru/vul/CVE-2018-8273 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8273 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01029 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8273 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8273 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8273 · Note
• http://securitytracker.com/id/1041467 · Note
• https://t.me/cvenotify/20739 · Telegram Post
• http://securityfocus.com/bid/104967 · Note