PT-2019-2695 · Microsoft · Sql Server

Published 2019-07-09 · Updated 2024-09-25 · CVE-2019-1068

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2014 through 2017

Description A remote code execution issue exists in Microsoft SQL Server due to incorrect handling of internal functions. This could allow an attacker to execute arbitrary code by sending a specially crafted SQL query. An attacker who successfully exploits this issue could execute code in the context of the SQL Server Database Engine service account. To exploit the issue, an authenticated attacker would need to submit a specially crafted query to an affected SQL server.

Recommendations For Microsoft SQL Server versions 2014 through 2017, update and patch all instances to address the issue. As a temporary workaround, consider restricting access to the SQL server to minimize the risk of exploitation. Avoid using specially crafted queries in the affected SQL server until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-02582

CVE-2019-1068

Affected Products

Sql Server

References · 17

• https://osv.dev/vulnerability/CVE-2019-1068 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1068 · Security Note
• https://bdu.fstec.ru/vul/2019-02582 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-1068 · Vendor Advisory
• https://bdu.fstec.ru/vul/CVE-2019-1068 · Security Note
• https://t.me/cybersecuritytechnologies/2687 · Telegram Post
• https://t.me/aptreports/12372 · Telegram Post
• https://t.me/secharvester/10585 · Telegram Post
• https://t.me/aptreports/6883 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1068 · Note
• https://t.me/aptreports/9072 · Telegram Post
• https://t.me/aptreports/6885 · Telegram Post
• https://twitter.com/fletch_ai/status/1838866098202259579 · Twitter Post
• https://t.me/rnetsec/14370 · Telegram Post