PT-2017-2097

CVE-2016-10311

·

Published

2017-04-10

·

Updated

2018-12-10

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 through 7.5
Description The issue is caused by a stack-based buffer overflow in the SAPSTARTSRV service of the SAP NetWeaver platform. This allows remote attackers to cause a denial of service by sending a crafted packet to the SAPSTARTSRV port.
Recommendations For SAP NetWeaver versions 7.0 through 7.5, consider restricting access to the SAPSTARTSRV port as a temporary workaround until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2016-10311
BDU:2017-01265
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com