CVE-2023-21705

Microsoft SQL Server Remote Code Execution Vulnerability

Description

Microsoft SQL Server Remote Code Execution Vulnerability

Link	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21705	patch vendor advisory

What is the severity of CVE-2023-21705?: CVE-2023-21705 has been scored as a high severity vulnerability.
How to fix CVE-2023-21705?: To fix CVE-2023-21705, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-21705 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2023-21705 is being actively exploited. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-21705?: CVE-2023-21705 affects Microsoft Microsoft SQL Server 2012 Service Pack 4 (QFE), Microsoft Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE), Microsoft Microsoft SQL Server 2017 (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 (GDR), Microsoft Microsoft SQL Server 2014 Service Pack 3 (CU 4), Microsoft Microsoft SQL Server 2019 (GDR), Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft Microsoft SQL Server 2017 (CU 31), Microsoft Microsoft SQL Server 2022 (GDR), Microsoft Microsoft SQL Server 2019 (CU 18).