Forum Discussion
Need help to figure the solution for recent vulnerabilities report in my DB host server.
this is my current DB version Microsoft SQL Server 2019 (RTM-CU23) (KB5030333) - 15.0.4335.1 (X64).
Where is that report from?
I don't understand what it's like to tell use. For me the report is a bit confusing.
But your patch level RTM-CU23 is fine, see
Microsoft SQL Server Versions List (sqlserverbuilds.blogspot.com)
This report was generated by my internal scan team by using SCAN tool, based on the scan report we will fix the reported item either by applying the patch or any config changes as per the policy.
May I know what is the TDS service mentioned in scan report.
Also I downloads the SQL servers patches from https://catalog.update.microsoft.com/Search.aspx?q=SQL%20Server%202019%20, can you please look and confirm this is right site where to download the MS patches.
- olafhelperJan 30, 2024Bronze Contributor
May I know what is the TDS service mentioned in scan report.
MaheshKS , already this little point shows, that the report isn't the smartest one.
TDS = "Tablular Data Stream", it's a communication protocoll; not a service
Tabular Data Stream - Wikipedia
- MaheshKSJan 31, 2024Copper ContributorThanks for your response olafhelper.
Is there any way of disabling the TDS without impacting the current Setup or its mandate to have for DB. (pardon me for dumb question but wanted to get clarified).
Also in my scan report, some old version SQL version fingerprint is found, how to figure from where they found that and how to fix it?- olafhelperJan 31, 2024Bronze Contributor
MaheshKS wrote:
Is there any way of disabling the TDS without impacting the current SetupHave your read my previous post? TDS is the communication protocoll, and if you could disable it, you can throw your SQL Server away: Unuseable.
how to figure from where they found that and how to fix it?
The report don't mention any detail and we can't guess them.
That all don't make my sense.
This kind of report/tool is in the way: You paid for it, so if generate an output, doesn't matter if it's meanfull.