CVE-2022-38031 - 漏洞详情

CVE-2022-38031 (CNNVD-202210-455)

HIGH

中文标题:

Microsoft OLE DB Provider for SQL Server 安全漏洞

英文标题:

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS分数: 8.8

发布时间: 2022-10-11 00:00:00

漏洞类型: 其他

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Microsoft OLE DB Provider for SQL Server是美国微软（Microsoft）公司的一种 API。允许以统一的方式访问来自各种来源的数据。 Microsoft OLE DB Provider for SQL Server 存在安全漏洞。以下产品和版本受到影响：Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 11 Version 22H2 for ARM64-based Systems,Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation),Windows Server 2012,Windows Server 2012 (Server Core installation),Windows Server 2012 R2,Windows Server 2012 R2 (Server Core installation),Windows Server 2019,Windows Server 2016,Windows Server 2016 (Server Core installation),Windows 7 for 32-bit Systems Service Pack 1,Windows 7 for x64-based Systems Service Pack 1,Windows 8.1 for 32-bit systems,Windows 8.1 for x64-based systems,Windows RT 8.1,Windows Server 2008 for 32-bit Systems Service Pack 2,Windows 10 for x64-based Systems,Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2019 (Server Core installation),Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based Systems,Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 11 Version 22H2 for x64-based Systems,Windows 10 for 32-bit Systems。

英文描述:

NOT_EXTRACTED

CWE类型:

（暂无数据）

受影响产品

厂商	产品	版本	版本范围	平台	CPE
Microsoft	Windows 10 Version 1809	-	< 10.0.17763.3532	-	`cpe:2.3:a:microsoft:windows_10_version_1809::::::::`
Microsoft	Windows Server 2019	-	< 10.0.17763.3532	-	`cpe:2.3:a:microsoft:windows_server_2019::::::::`
Microsoft	Windows Server 2019 (Server Core installation)	-	< 10.0.17763.3532	-	`cpe:2.3:a:microsoft:windows_server_2019_(server_core_installation)::::::::`
Microsoft	Windows 10 Version 21H1	-	< 10.0.19043.2130	-	`cpe:2.3:a:microsoft:windows_10_version_21h1::::::::`
Microsoft	Windows Server 2022	-	< 10.0.20348.1129	-	`cpe:2.3:a:microsoft:windows_server_2022::::::::`
Microsoft	Windows 10 Version 20H2	-	< 10.0.19042.2130	-	`cpe:2.3:a:microsoft:windows_10_version_20h2::::::::`
Microsoft	Windows 11 version 21H2	-	< 10.0.22000.1098	-	`cpe:2.3:a:microsoft:windows_11_version_21h2::::::::`
Microsoft	Windows 10 Version 21H2	-	< 10.0.19044.2130	-	`cpe:2.3:a:microsoft:windows_10_version_21h2::::::::`
Microsoft	Windows 11 version 22H2	-	< 10.0.22621.674	-	`cpe:2.3:a:microsoft:windows_11_version_22h2::::::::`
Microsoft	Windows 10 Version 1507	-	< 10.0.10240.19507	-	`cpe:2.3:a:microsoft:windows_10_version_1507::::::::`
Microsoft	Windows 10 Version 1607	-	< 10.0.14393.5427	-	`cpe:2.3:a:microsoft:windows_10_version_1607::::::::`
Microsoft	Windows Server 2016	-	< 10.0.14393.5427	-	`cpe:2.3:a:microsoft:windows_server_2016::::::::`
Microsoft	Windows Server 2016 (Server Core installation)	-	< 10.0.14393.5427	-	`cpe:2.3:a:microsoft:windows_server_2016_(server_core_installation)::::::::`
Microsoft	Windows 7	-	< 6.1.7601.26174	-	`cpe:2.3:a:microsoft:windows_7::::::::`
Microsoft	Windows 7 Service Pack 1	-	< 6.1.7601.26174	-	`cpe:2.3:a:microsoft:windows_7_service_pack_1::::::::`
Microsoft	Windows 8.1	-	< 6.3.9600.20625	-	`cpe:2.3:a:microsoft:windows_8.1::::::::`
Microsoft	Windows Server 2008 Service Pack 2	-	< 6.0.6003.21721	-	`cpe:2.3:a:microsoft:windows_server_2008_service_pack_2::::::::`
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	-	< 6.0.6003.21721	-	`cpe:2.3:a:microsoft:windows_server_2008_service_pack_2_(server_core_installation)::::::::`
Microsoft	Windows Server 2008 Service Pack 2	-	< 6.0.6003.21721	-	`cpe:2.3:a:microsoft:windows_server_2008__service_pack_2::::::::`
Microsoft	Windows Server 2008 R2 Service Pack 1	-	< 6.1.7601.26174	-	`cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1::::::::`
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	-	< 6.1.7601.26174	-	`cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1_(server_core_installation)::::::::`
Microsoft	Windows Server 2012	-	< 6.2.9200.23920	-	`cpe:2.3:a:microsoft:windows_server_2012::::::::`
Microsoft	Windows Server 2012 (Server Core installation)	-	< 6.2.9200.23920	-	`cpe:2.3:a:microsoft:windows_server_2012_(server_core_installation)::::::::`
Microsoft	Windows Server 2012 R2	-	< 6.3.9600.20625	-	`cpe:2.3:a:microsoft:windows_server_2012_r2::::::::`
Microsoft	Windows Server 2012 R2 (Server Core installation)	-	< 6.3.9600.20625	-	`cpe:2.3:a:microsoft:windows_server_2012_r2_(server_core_installation)::::::::`
microsoft	windows_10	-	-	-	`cpe:2.3:o:microsoft:windows_10:-:::::::*`
microsoft	windows_10	20h2	-	-	`cpe:2.3:o:microsoft:windows_10:20h2:::::::*`
microsoft	windows_10	21h1	-	-	`cpe:2.3:o:microsoft:windows_10:21h1:::::::*`
microsoft	windows_10	21h2	-	-	`cpe:2.3:o:microsoft:windows_10:21h2:::::::*`
microsoft	windows_10	1607	-	-	`cpe:2.3:o:microsoft:windows_10:1607:::::::*`
microsoft	windows_10	1809	-	-	`cpe:2.3:o:microsoft:windows_10:1809:::::::*`
microsoft	windows_11	-	-	-	`cpe:2.3:o:microsoft:windows_11:-::::::arm64:`
microsoft	windows_11	22h2	-	-	`cpe:2.3:o:microsoft:windows_11:22h2::::::arm64:`
microsoft	windows_7	-	-	-	`cpe:2.3:o:microsoft:windows_7:-:sp1::::::`
microsoft	windows_8.1	-	-	-	`cpe:2.3:o:microsoft:windows_8.1:-:::::::*`
microsoft	windows_rt_8.1	-	-	-	`cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*`
microsoft	windows_server_2008	-	-	-	`cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::`
microsoft	windows_server_2008	r2	-	-	`cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*`
microsoft	windows_server_2012	-	-	-	`cpe:2.3:o:microsoft:windows_server_2012:-:::::::*`
microsoft	windows_server_2012	r2	-	-	`cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*`
microsoft	windows_server_2016	-	-	-	`cpe:2.3:o:microsoft:windows_server_2016:-:::::::*`
microsoft	windows_server_2019	-	-	-	`cpe:2.3:o:microsoft:windows_server_2019:-:::::::*`
microsoft	windows_server_2022	-	-	-	`cpe:2.3:o:microsoft:windows_server_2022:-:::::::*`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）

临时解决方案:

（暂无数据）

参考链接

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability vendor-advisory
cve.org

访问

af854a3a-2127-422b-91ae-364da2661108 OTHER
nvd.nist.gov

访问

CVSS评分详情

3.1 (cna)

HIGH

8.8

CVSS向量: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

机密性

HIGH

完整性

HIGH

可用性

HIGH

时间信息

发布时间:

2022-10-11 00:00:00

修改时间:

2025-01-02 21:27:31

创建时间:

2025-11-11 15:37:41

更新时间:

2025-11-11 15:57:36

利用信息

暂无可利用代码信息

数据源详情

数据源	记录ID	版本	提取时间
CVE	`cve_CVE-2022-38031`	2025-11-11 15:21:32	2025-11-11 07:37:41
NVD	`nvd_CVE-2022-38031`	2025-11-11 14:58:26	2025-11-11 07:45:54
CNNVD	`cnnvd_CNNVD-202210-455`	2025-11-11 15:11:01	2025-11-11 07:57:36

版本与语言

当前版本: v3

主要语言: EN

支持语言:

EN ZH

安全公告

暂无安全公告信息

变更历史

v3 CNNVD

2025-11-11 15:57:36

vulnerability_type: 未提取 → 其他; cnnvd_id: 未提取 → CNNVD-202210-455; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']

查看详细变更

vulnerability_type: 未提取 -> 其他
cnnvd_id: 未提取 -> CNNVD-202210-455
data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']

v2 NVD

2025-11-11 15:45:54

affected_products_count: 26 → 43; references_count: 1 → 2; data_sources: ['cve'] → ['cve', 'nvd']

查看详细变更

affected_products_count: 26 -> 43
references_count: 1 -> 2
data_sources: ['cve'] -> ['cve', 'nvd']

CVE-2022-38031 (CNNVD-202210-455)

中文标题:

Microsoft OLE DB Provider for SQL Server 安全漏洞

英文标题:

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

漏洞描述

中文描述:

英文描述:

CWE类型:

标签:

受影响产品

解决方案

中文解决方案:

英文解决方案:

临时解决方案:

参考链接

CVSS评分详情

3.1 (cna)

时间信息

利用信息

数据源详情

版本与语言

安全公告

变更历史