CVE-2022-27670

Name of the Vulnerable Software and Affected Versions SAP SQL Anywhere version 17.0

Description The issue allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers.

Recommendations For SAP SQL Anywhere version 17.0, consider restricting access to queries that use indirect identifiers until a patch is available. As a temporary workaround, monitor server activity closely to quickly respond to potential crashes caused by malicious queries.