Technical Information

Brief overview of the risk:
A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could execute code in the context of the SQL Server Database Engine service account.

Detailed Information on the risk:
To exploit the vulnerability, an attacker would need to submit a specially crafted query to an affected SQL server.

Further information on this exploit is available at : CVE-2018-8273