TMA-MSSQL2022-1.1

Ensure Latest SQL Server Cumulative and Security Updates are Installed

높음레벨 1수동 검토mssql

설명

SQL Server patches contain program updates that fix security and product functionality issues found in the software. These patches can be installed with a security update, which is a single patch, or a cumulative update which is a group of patches. The SQL Server version and patch levels should be the most recent compatible with the organizations' operational needs. Using the most recent SQL Server software, along with all applicable patches can help limit the possibilities for vulnerabilities in the software. The installation version and/or patches applied during setup should be established according to the needs of the organization.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

To determine your SQL Server patch level, run the following code snippet. SELECT SERVERPROPERTY('ProductLevel') as SP_installed, SERVERPROPERTY('ProductVersion') as Version, SERVERPROPERTY('ProductUpdateLevel') as 'ProductUpdate_Level', SERVERPROPERTY('ProductUpdateReference') as 'KB_Number';

조치 방법

조치 방식: 가이드 또는 인프라 패치

Identify the current version and patch level of your SQL Server instances and ensure they contain the latest security fixes. Make sure to test these fixes in your test environments before updating production instances. The most recent SQL Server patches can be found here: https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest- updates

속성

운영 체제: 모두
태그: mssqlpatchingsqlserver-2022
참고 자료: CIS Microsoft SQL Server 2022 Benchmark v1.3.0 - 1.1 Ensure Latest SQL Server Cumulative and Security Updates are Installed