Microsoft ODBC and OLE DB Remote Code Execution Vulnerability | CVE-2023-28304

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

Vulnerability:

Microsoft ODBC and OLE DB remote code execution vulnerability
Microsoft SQL OLE DB remote code execution vulnerability
Microsoft OLE DB driver for SQL server remote code execution vulnerability

cve-2023-29349, cve-2023-32028, cve-2023-36417, cve-2023-38169, cve-2024-28906, cve-2024-28908, cve-2024-28909
cve-2024-28910, cve-2024-28911, cve-2024-28912, cve-2024-28913, cve-2024-28914, cve-2024-28915, cve-2024-28926
cve-2024-28927, cve-2024-28939, cve-2024-28940, cve-2024-28942, cve-2024-28944, cve-2024-28945, cve-2024-29044
cve-2024-29045, cve-2024-29046, cve-2024-29048, cve-2024-29982, cve-2024-29983, cve-2024-29984, cve-2024-29985

Resolution

The issue has been resolved in UIM 23.4 CU2

Additional Information

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28304