What is CVE-2022-23276?

CVE-2022-23276 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. SQL Server for Linux Containers Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2022-23276 cover?

CVE-2022-23276 covers the following CVE IDs: CVE-2022-23276. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2022-23276?

CVE-2022-23276 has a CVSS v3 base score of 7.8, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2022-23276?

CVE-2022-23276 affects 1 product, including: SQL Server 2019 for Linux Containers.

CVE-2022-23276HighCVSS 7.8

SQL Server for Linux Containers Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

February 8, 2022

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2022-23276 →

📋 Description

If I'm running SQL Server 2019 on premise, am I vulnerable to this CVE? This vulnerability only exists in the containerized version of SQL Server 2019 for Linux. If you are running that version, Microsoft recommends applying the update.

🎯 Affected products1

SQL Server 2019 for Linux Containers

✅ Remediation

KB5010657 (Security Update) — fixed build 15.0.2090.38

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23276
patchhttps://docs.microsoft.com/en-us/sql/linux/sql-server-linux-change-repo?view=sql-server-ver15&pivots=ld2-rhel