Fluid Attacks Database

Description

Microsoft.Data.SqlClient and System.Data.SqlClient vulnerable to SQL Data Provider Security Feature Bypass Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
nuget	microsoft.data.sqlclient	>=0 <2.1.7 \|\| >=3.0.0 <3.1.5 \|\| >=4.0.0 <4.0.5 \|\| >=5.0.0 <5.1.3	2.1.7, 3.1.5, 4.0.5, 5.1.3
nuget	system.data.sqlclient	>=0 <4.8.6	4.8.6
rpm rhel8	dotnet8.0	<0:8.0.101-1.el8_9	0:8.0.101-1.el8_9
rpm rhel9	dotnet6.0	<0:6.0.126-1.el9_3	0:6.0.126-1.el9_3
rpm rhel8	dotnet7.0	<0:7.0.115-1.el8_9	0:7.0.115-1.el8_9
rpm rhel9	dotnet8.0	<0:8.0.101-1.el9_3	0:8.0.101-1.el9_3
rpm rhel8	dotnet6.0	<0:6.0.126-1.el8_9	0:6.0.126-1.el8_9
rpm rhel9	dotnet7.0	<0:7.0.115-1.el9_3	0:7.0.115-1.el9_3
nuget	dotnet	>=6.0.0 <6.0.26 \|\| >=7.0.0 <7.0.15	6.0.26, 7.0.15

Aliases

1. CVE-2024-00562. NVD-2024-00563. OSV-2024-00564. GCVE-2024-0056

References

1. https://github.com/dotnet/announcements/issues/2922. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0056

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.