Many thanks Steve, this does appear to have been resolved in the latest patches that were pushed out by Microsoft this month.

I am struggling to identify which specific KB or...

• This reply was modified 1 year, 11 months ago by zoggling.

Thanks all. I can confirm that the code is not being called in a loop, or in an explicit transaction. The parent procedure sproc_ValidateUser just performs some basic validation and...

I have already tried all of the above against one of our DEV servers (including multiple versions of ODBC DLLs).

There is currently no solution, and no word from Microsoft on...

• This reply was modified 1 year, 11 months ago by zoggling.

At the start of this ticket, we were on ODBC driver 13.3.6430.49 and had had all the latest cumulative updates installed in sequence.

The Microsoft "Security Vulnerability" pages themselves state that...

@ken McKelvey - this has not solved the issue for us unfortunately.

We already had ODBC 17.10.4.1 installed, and upgraded from ODBC 18.2.2.1 to ODBC 18.3.1.1 as suggested in the article.

But...

• This reply was modified 1 year, 12 months ago by zoggling.
• This reply was modified 1 year, 12 months ago by zoggling.

Is there anyone from Microsoft who can please add this to the bug list as a high priority?

Is there any way to raise this with Microsoft without having to purchase a £199 single incident (Business hours support) support plan?

I don't see why we should be out of...

We already have ODBC drivers 17 and 18 as per the above. But SQL Server 2016 highlights a dependency on ODBC driver 13, which has a high-severity vulnerability identified (see...

All of our SQL Server 2016 instances are already on that latest build - Microsoft SQL Server 2016 (SP3-GDR) (KB5021129) - 13.0.6430.49 (X64).

We reviewed the SQL Server Agent error log...

• This reply was modified 2 years, 1 month ago by zoggling.

(repeat post removed)

• This reply was modified 2 years, 1 month ago by zoggling.

Has there please been any response from Microsoft, or the MVP?

Please see re-attached image showing 14.xx.

What version would they recommend upgrading SQL Server to? We're on the latest build for SQL Server 2016, which is still in support until 2026.

• This reply was modified 2 years, 1 month ago by zoggling.

That's very helpful, thank you

This vulnerability is categorised as "Important" by Microsoft. Surely this needs to be addressed as a priority?

What installer would have created these ODBC DLLs? We have a few severs where...

• This reply was modified 2 years, 1 month ago by zoggling.

We have tried the repair option, and all it did was to re-install the ODBC version 13 driver!

After uninstalling the ODBC version 13 driver again, the SQL Server Agent service...

• This reply was modified 2 years, 1 month ago by zoggling.