Vulnerability · Published Aug 17, 2020 · Assigned by microsoft
CVE-2020-1455Microsoft SQL Server Management Studio Denial of Service Vulnerability
Medium 5.3
In plain English
A medium-severity security flaw in SQL Server Management Studio 18.6 from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)1.2%top 31.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The security update addresses the vulnerability by ensuring Microsoft SQL Server Management Studio properly handles files.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | SQL Server Management Studio 18.6 | 18.0 – before publication |