CVE-2014-4061

medium Microsoft
CVSS v3 Base Score
6.8
AV:N/AC:L/Au:S/C:N/I:N/A:C
EPSS Score
38.4%
Exploitation probability in 30 days
Top 3% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
C
Published: August 12, 2014 (4293 days ago)
Last Modified: May 6, 2026
Vendor: Microsoft
Source: NVD

Description

Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated users to cause a denial of service (daemon hang) via a crafted T-SQL statement, aka "Microsoft SQL Server Stack Overrun Vulnerability."

CWE

CWE-399

Affected Products

microsoft sql server

References

🔗 blogs.technet.com 🔗 secunia.com 🔗 www.securitytracker.com 🔗 docs.microsoft.com 🔗 blogs.technet.com