V-213991
MS SQL Server 2016 Instance Security Technical Implementation Guide
Title
SQL Server must maintain a separate execution domain for each executing process.
Description
<VulnDiscussion>Database management systems can maintain separate execution domains for each executing process by assigning each process a separate address space. Each process has a distinct address space so that communication between processes is controlled through the security functions, and one process cannot modify the executing code of another process. Maintaining separate execution domains for executing processes can be achieved, for example, by implementing separate address spaces...
Fix Text (Documentation Requirement)
Disable CLR support in SQL Server by executing the following query: EXEC sp_configure 'clr enabled', 0 GO RECONFIGURE GO