CVE-2023-36728

Summary

CVE-2023-36728 is a newly disclosed vulnerability affecting Microsoft SQL Server. Hackers can exploit this Denial of Service (DoS) weakness to cause the server to crash or become unresponsive, leading to a disruption of services. The flaw exists in the way SQL Server handles large numbers of connections when certain network packets are received, making it an attractive target for malicious actors. Mitigation measures include applying the latest Microsoft patches and implementing network security controls. It is crucial for organizations using SQL Server to prioritize updating their systems to protect against potential DoS attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.