CVE-2014-4061
Last modified
CVE-2014-4061 is a vulnerability of currently unknown severity. Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated users to cause a denial of service (daemon hang) via a crafted T-SQL statement, aka "Microsoft SQL Server Stack Overrun Vulnerability.". EPSS estimates a 26.50% chance of exploitation in the next 30 days.
Description
Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated users to cause a denial of service (daemon hang) via a crafted T-SQL statement, aka "Microsoft SQL Server Stack Overrun Vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Sql Server | 2008 | R2 Sp2 |
| Microsoft | Sql Server | 2012 | Sp1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-4061?
How severe is CVE-2014-4061?
How do I fix CVE-2014-4061?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-4055Microsoft Internet Explorer 10 and 11 allows remote attacker…
- CVE-2014-4056Microsoft Internet Explorer 7 through 10 allows remote attac…
- CVE-2014-4057Microsoft Internet Explorer 11 allows remote attackers to ex…
- CVE-2014-4058Microsoft Internet Explorer 9 through 11 allows remote attac…
- CVE-2014-4059Microsoft Internet Explorer 6 through 11 allows remote attac…
- CVE-2014-4060Use-after-free vulnerability in MCPlayer.dll in Microsoft Wi…
- CVE-2014-4062Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and…
- CVE-2014-4063Microsoft Internet Explorer 6 through 11 allows remote attac…
- CVE-2014-4064The kernel-mode drivers in Microsoft Windows Vista SP2, Wind…
- CVE-2014-4065Microsoft Internet Explorer 6 through 11 allows remote attac…
- CVE-2014-4066Microsoft Internet Explorer 11 allows remote attackers to ex…
- CVE-2014-4067Microsoft Internet Explorer 10 and 11 allows remote attacker…
Are you affected by CVE-2014-4061?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST