Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVSS Details
- CVSS 3.1 Base Score: 8.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-aspnetcore-runtime-6.0alma-upgrade-aspnetcore-runtime-7.0alma-upgrade-aspnetcore-runtime-8.0alma-upgrade-aspnetcore-targeting-pack-6.0alma-upgrade-aspnetcore-targeting-pack-7.0alma-upgrade-aspnetcore-targeting-pack-8.0alma-upgrade-dotnetalma-upgrade-dotnet-apphost-pack-6.0alma-upgrade-dotnet-apphost-pack-7.0alma-upgrade-dotnet-apphost-pack-8.0alma-upgrade-dotnet-hostalma-upgrade-dotnet-hostfxr-6.0alma-upgrade-dotnet-hostfxr-7.0alma-upgrade-dotnet-hostfxr-8.0alma-upgrade-dotnet-runtime-6.0alma-upgrade-dotnet-runtime-7.0alma-upgrade-dotnet-runtime-8.0alma-upgrade-dotnet-sdk-6.0alma-upgrade-dotnet-sdk-6.0-source-built-artifactsalma-upgrade-dotnet-sdk-7.0alma-upgrade-dotnet-sdk-7.0-source-built-artifactsalma-upgrade-dotnet-sdk-8.0alma-upgrade-dotnet-sdk-8.0-source-built-artifactsalma-upgrade-dotnet-targeting-pack-6.0alma-upgrade-dotnet-targeting-pack-7.0alma-upgrade-dotnet-targeting-pack-8.0alma-upgrade-dotnet-templates-6.0alma-upgrade-dotnet-templates-7.0alma-upgrade-dotnet-templates-8.0alma-upgrade-netstandard-targeting-pack-2.1 | Jan 15, 2024 | Jan 9, 2024 | |
| Alpine Linux | alpine-linux-upgrade-dotnet6-buildalpine-linux-upgrade-dotnet6-runtimealpine-linux-upgrade-dotnet7-buildalpine-linux-upgrade-dotnet7-runtime | Aug 22, 2024 | Jan 9, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-aspnetcore-runtime-6-0amazon-linux-2023-upgrade-aspnetcore-targeting-pack-6-0amazon-linux-2023-upgrade-dotnetamazon-linux-2023-upgrade-dotnet6-0-debuginfoamazon-linux-2023-upgrade-dotnet6-0-debugsourceamazon-linux-2023-upgrade-dotnet-apphost-pack-6-0amazon-linux-2023-upgrade-dotnet-apphost-pack-6-0-debuginfoamazon-linux-2023-upgrade-dotnet-hostamazon-linux-2023-upgrade-dotnet-host-debuginfoamazon-linux-2023-upgrade-dotnet-hostfxr-6-0amazon-linux-2023-upgrade-dotnet-hostfxr-6-0-debuginfoamazon-linux-2023-upgrade-dotnet-runtime-6-0amazon-linux-2023-upgrade-dotnet-runtime-6-0-debuginfoamazon-linux-2023-upgrade-dotnet-sdk-6-0amazon-linux-2023-upgrade-dotnet-sdk-6-0-debuginfoamazon-linux-2023-upgrade-dotnet-sdk-6-0-source-built-artifactsamazon-linux-2023-upgrade-dotnet-targeting-pack-6-0amazon-linux-2023-upgrade-dotnet-templates-6-0amazon-linux-2023-upgrade-netstandard-targeting-pack-2-1 | Feb 17, 2025 | Jan 9, 2024 | |
| Centos_linux | — | centos-upgrade-aspnetcore-runtime-6-0centos-upgrade-aspnetcore-runtime-7-0centos-upgrade-aspnetcore-runtime-8-0centos-upgrade-aspnetcore-targeting-pack-6-0centos-upgrade-aspnetcore-targeting-pack-7-0centos-upgrade-aspnetcore-targeting-pack-8-0centos-upgrade-dotnetcentos-upgrade-dotnet-apphost-pack-6-0centos-upgrade-dotnet-apphost-pack-6-0-debuginfocentos-upgrade-dotnet-apphost-pack-7-0centos-upgrade-dotnet-apphost-pack-7-0-debuginfocentos-upgrade-dotnet-apphost-pack-8-0centos-upgrade-dotnet-apphost-pack-8-0-debuginfocentos-upgrade-dotnet-hostcentos-upgrade-dotnet-host-debuginfocentos-upgrade-dotnet-hostfxr-6-0centos-upgrade-dotnet-hostfxr-6-0-debuginfocentos-upgrade-dotnet-hostfxr-7-0centos-upgrade-dotnet-hostfxr-7-0-debuginfocentos-upgrade-dotnet-hostfxr-8-0centos-upgrade-dotnet-hostfxr-8-0-debuginfocentos-upgrade-dotnet-runtime-6-0centos-upgrade-dotnet-runtime-6-0-debuginfocentos-upgrade-dotnet-runtime-7-0centos-upgrade-dotnet-runtime-7-0-debuginfocentos-upgrade-dotnet-runtime-8-0centos-upgrade-dotnet-runtime-8-0-debuginfocentos-upgrade-dotnet-sdk-6-0centos-upgrade-dotnet-sdk-6-0-debuginfocentos-upgrade-dotnet-sdk-7-0centos-upgrade-dotnet-sdk-7-0-debuginfocentos-upgrade-dotnet-sdk-8-0centos-upgrade-dotnet-sdk-8-0-debuginfocentos-upgrade-dotnet-targeting-pack-6-0centos-upgrade-dotnet-targeting-pack-7-0centos-upgrade-dotnet-targeting-pack-8-0centos-upgrade-dotnet-templates-6-0centos-upgrade-dotnet-templates-7-0centos-upgrade-dotnet-templates-8-0centos-upgrade-dotnet6-0-debuginfocentos-upgrade-dotnet6-0-debugsourcecentos-upgrade-dotnet7-0-debuginfocentos-upgrade-dotnet7-0-debugsourcecentos-upgrade-dotnet8-0-debuginfocentos-upgrade-dotnet8-0-debugsourcecentos-upgrade-netstandard-targeting-pack-2-1 | Jan 11, 2024 | Jan 9, 2024 |
| Microsoft Visual_studio | microsoft-visual_studio_2022-upgrade-latest-ltsc_17_2microsoft-visual_studio_2022-upgrade-latest-ltsc_17_4microsoft-visual_studio_2022-upgrade-latest-ltsc_17_6microsoft-visual_studio_2022-upgrade-latest-ltsc_17_8 | Jun 25, 2025 | Jan 9, 2024 | |
| Msft | — | msft-kb5032968-6b3af593-9bb9-4861-98e0-44d036ac2688-x64msft-kb5033592-699c49b0-a0b9-4dcd-bedb-094d835fdeeb-x64msft-kb5033900-1720d818-358c-49a5-a715-ee75e0d14b22msft-kb5033905-ea87cf6e-9277-4baa-9265-9097dd2ff9d7msft-kb5033913-6bf10252-6aac-495f-8716-de0119a7215bmsft-kb5033915-430f7696-cbc8-410c-b841-71dc13605161msft-kb5033947-1a03e3e6-489a-49e3-a265-7aa7cac8cc32msft-kb5033947-5cad1e9b-207c-484a-a8ac-ef8272c2f015msft-kb5033947-d4e636e8-ee2b-45f5-af20-66e21bf437d1microsoft-windows-windows_server_2016-1607-kb5034119microsoft-dot_net_framework-windows_10-1607-kb5033910microsoft-dot_net_framework-windows_server_2016-1607-kb5033910microsoft-dot_net_framework-windows_10-1809-kb5033911microsoft-dot_net_framework-windows_server_2019-1809-kb5033911microsoft-dot_net_framework-windows_server_2022-21h2-kb5033914microsoft-dot_net_framework-windows_server_2022-22h2-kb5033914microsoft-dot_net_framework-windows_11-21h2-kb5033912microsoft-dot_net_framework-windows_10-21h2-kb5033909microsoft-dot_net_framework-windows_10-22h2-kb5033909microsoft-dot_net_framework-windows_10-1809-kb5033904microsoft-dot_net_framework-windows_server_2019-1809-kb5033904microsoft-dot_net_framework-windows_10-1607-kb5034119microsoft-dot_net_framework-windows_server_2016-1607-kb5034119microsoft-dot_net_framework-windows_server_2022-21h2-kb5033922microsoft-dot_net_framework-windows_server_2022-22h2-kb5033922microsoft-dot_net_framework-windows_server_2022-23h2-kb5033922microsoft-dot_net_framework-windows_11-21h2-kb5033919microsoft-dot_net_framework-windows_10-21h2-kb5033918microsoft-dot_net_framework-windows_11-22h2-kb5033920microsoft-dot_net_framework-windows_11-23h2-kb5033920microsoft-dot_net_framework-windows_10-22h2-kb5033918 | Jan 9, 2024 | Jan 9, 2024 |
| Oracle_linux | — | oracle-linux-upgrade-aspnetcore-runtime-6-0oracle-linux-upgrade-aspnetcore-runtime-7-0oracle-linux-upgrade-aspnetcore-runtime-8-0oracle-linux-upgrade-aspnetcore-targeting-pack-6-0oracle-linux-upgrade-aspnetcore-targeting-pack-7-0oracle-linux-upgrade-aspnetcore-targeting-pack-8-0oracle-linux-upgrade-dotnetoracle-linux-upgrade-dotnet-apphost-pack-6-0oracle-linux-upgrade-dotnet-apphost-pack-7-0oracle-linux-upgrade-dotnet-apphost-pack-8-0oracle-linux-upgrade-dotnet-hostoracle-linux-upgrade-dotnet-hostfxr-6-0oracle-linux-upgrade-dotnet-hostfxr-7-0oracle-linux-upgrade-dotnet-hostfxr-8-0oracle-linux-upgrade-dotnet-runtime-6-0oracle-linux-upgrade-dotnet-runtime-7-0oracle-linux-upgrade-dotnet-runtime-8-0oracle-linux-upgrade-dotnet-sdk-6-0oracle-linux-upgrade-dotnet-sdk-6-0-source-built-artifactsoracle-linux-upgrade-dotnet-sdk-7-0oracle-linux-upgrade-dotnet-sdk-7-0-source-built-artifactsoracle-linux-upgrade-dotnet-sdk-8-0oracle-linux-upgrade-dotnet-sdk-8-0-source-built-artifactsoracle-linux-upgrade-dotnet-targeting-pack-6-0oracle-linux-upgrade-dotnet-targeting-pack-7-0oracle-linux-upgrade-dotnet-targeting-pack-8-0oracle-linux-upgrade-dotnet-templates-6-0oracle-linux-upgrade-dotnet-templates-7-0oracle-linux-upgrade-dotnet-templates-8-0oracle-linux-upgrade-netstandard-targeting-pack-2-1 | Jan 12, 2024 | Jan 9, 2024 |
| Redhat_linux | redhat-upgrade-aspnetcore-runtime-6-0redhat-upgrade-aspnetcore-runtime-7-0redhat-upgrade-aspnetcore-runtime-8-0redhat-upgrade-aspnetcore-targeting-pack-6-0redhat-upgrade-aspnetcore-targeting-pack-7-0redhat-upgrade-aspnetcore-targeting-pack-8-0redhat-upgrade-dotnetredhat-upgrade-dotnet-apphost-pack-6-0redhat-upgrade-dotnet-apphost-pack-6-0-debuginforedhat-upgrade-dotnet-apphost-pack-7-0redhat-upgrade-dotnet-apphost-pack-7-0-debuginforedhat-upgrade-dotnet-apphost-pack-8-0redhat-upgrade-dotnet-apphost-pack-8-0-debuginforedhat-upgrade-dotnet-hostredhat-upgrade-dotnet-host-debuginforedhat-upgrade-dotnet-hostfxr-6-0redhat-upgrade-dotnet-hostfxr-6-0-debuginforedhat-upgrade-dotnet-hostfxr-7-0redhat-upgrade-dotnet-hostfxr-7-0-debuginforedhat-upgrade-dotnet-hostfxr-8-0redhat-upgrade-dotnet-hostfxr-8-0-debuginforedhat-upgrade-dotnet-runtime-6-0redhat-upgrade-dotnet-runtime-6-0-debuginforedhat-upgrade-dotnet-runtime-7-0redhat-upgrade-dotnet-runtime-7-0-debuginforedhat-upgrade-dotnet-runtime-8-0redhat-upgrade-dotnet-runtime-8-0-debuginforedhat-upgrade-dotnet-sdk-6-0redhat-upgrade-dotnet-sdk-6-0-debuginforedhat-upgrade-dotnet-sdk-6-0-source-built-artifactsredhat-upgrade-dotnet-sdk-7-0redhat-upgrade-dotnet-sdk-7-0-debuginforedhat-upgrade-dotnet-sdk-7-0-source-built-artifactsredhat-upgrade-dotnet-sdk-8-0redhat-upgrade-dotnet-sdk-8-0-debuginforedhat-upgrade-dotnet-sdk-8-0-source-built-artifactsredhat-upgrade-dotnet-targeting-pack-6-0redhat-upgrade-dotnet-targeting-pack-7-0redhat-upgrade-dotnet-targeting-pack-8-0redhat-upgrade-dotnet-templates-6-0redhat-upgrade-dotnet-templates-7-0redhat-upgrade-dotnet-templates-8-0redhat-upgrade-dotnet6-0-debuginforedhat-upgrade-dotnet6-0-debugsourceredhat-upgrade-dotnet7-0-debuginforedhat-upgrade-dotnet7-0-debugsourceredhat-upgrade-dotnet8-0-debuginforedhat-upgrade-dotnet8-0-debugsourceredhat-upgrade-netstandard-targeting-pack-2-1 | Jan 11, 2024 | Jan 9, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Jan 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub