Microsoft SQL Server flaw puts Icelandic businesses at risk

A critical vulnerability in Microsoft SQL Server could have wide-ranging effects, including in Iceland, the IT company APRÓ has warned, according to mbl.is. Microsoft has released security updates for the flaw, which has a severity score of 9.8 out of 10.

The vulnerability is a memory overflow flaw in SQL Server, database software used by companies and institutions to store and process information. APRÓ specialist Þröstur Jónasson told mbl.is that the software is one of the three main database engines in use, supporting everything from small personal databases to large systems used by businesses.

Microsoft says an attacker could exploit the flaw to run malicious code on a database server without authenticating. Depending on the permissions available to the service, an attack could expose sensitive information, alter or delete data, or lead to further attacks within a company’s computer systems.

Jónasson said many widely used accounting systems in Iceland rely on the software. APRÓ advises operators to check their systems and install the relevant updates as soon as possible.

“Those who maintain or operate these databases need to install the relevant security updates. It is very important not to put them off,” Jónasson said. He added that companies often delay updates as Christmas approaches and sales increase, despite the risk that an attack could cause more damage than the brief interruption needed to apply an update.