Security Update for SQL Server 2017 RTM GDR (KB5014354)

Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled.

More information about the vulnerability can be found here: KB5014354

For other impacted SQL Server releases, please see:

Security Update for SQL Server 2014 SP3 CU (CU4+GDR fix)*
Security Update for SQL Server 2014 SP3 GDR
Security Update for SQL Server 2016 SP2 CU (CU17+GDR fix)*
Security Update for SQL Server 2016 SP2 GDR
Security Update for SQL Server 2016 SP3 GDR
Security Update for SQL Server 2016 SP3 Azure Connect Feature Pack GDR
Security Update for SQL Server 2017 RTM CU (CU29+GDR fix)*
Security Update for SQL Server 2017 RTM GDR
Security Update for SQL Server 2019 RTM CU (CU16+GDR fix)*
Security Update for SQL Server 2019 RTM GDR
* These security updates are for SQL Server instances that have applied a Cumulative Update.

For a complete listing of the issues resolved in this update, see the associated Microsoft Knowledge Base article.

Supported Operating Systems

Windows 10, Windows Server 2019, Windows Server 2016, Windows Server 2012, Windows Server 2012 R2, Windows 8, Windows 8.1

This update is applicable to SQL Server 2017 RTM instances installed on supported Windows and Linux Operating Systems, and Linux containers.

This update refreshes Microsoft SQL Server 2017 RTM Windows and Linux instances that have NOT had a Cumulative Update applied (versions 14.0.1000.169 to 14.0.2037.2).

For Microsoft SQL Server 2017 RTM for Windows and Linux instances (versions 14.0.3006.16 (CU1) to 14.0.3436.1 (CU29)) that have had any Cumulative Update applied, please see KB5014553. After you install this update, you may have to restart your computer.