CVE-2023-36728
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2023-36728 is a newly disclosed vulnerability affecting Microsoft SQL Server. Hackers can exploit this Denial of Service (DoS) weakness to cause the server to crash or become unresponsive, leading to a disruption of services. The flaw exists in the way SQL Server handles large numbers of connections when certain network packets are received, making it an attractive target for malicious actors. Mitigation measures include applying the latest Microsoft patches and implementing network security controls. It is crucial for organizations using SQL Server to prioritize updating their systems to protect against potential DoS attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft ODBC Driver for SQL Server
- Microsoft OLE DB Driver for SQL Server
- Microsoft SQL Server
Affected Vendors
- Microsoft
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions