5.3

CVE-2021-33684

SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.77, 7.81, 7.84, allows an attacker to send overlong content in the RFC request type thereby crashing the corresponding work process because of memory corruption vulnerability. The work process will attempt to restart itself after the crash and hence the impact on the availability is low.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Netweaver Abap Version 7.21
SAP ≫ Netweaver Abap Version 7.21ext
SAP ≫ Netweaver Abap Version 7.22
SAP ≫ Netweaver Abap Version 7.22ext
SAP ≫ Netweaver Abap Version 7.49
SAP ≫ Netweaver Abap Version 7.53
SAP ≫ Netweaver Abap Version 7.77
SAP ≫ Netweaver Abap Version 7.81
SAP ≫ Netweaver Abap Version kernel_8.04
SAP ≫ Netweaver Abap Version krnl32nuc_7.21
SAP ≫ Netweaver Abap Version krnl32uc_7.21
SAP ≫ Netweaver Abap Version krnl64nuc_7.21
SAP ≫ Netweaver Abap Version krnl64uc_8.04
SAP ≫ Netweaver Application Server Abap Version kernel_8.04
SAP ≫ Netweaver Application Server Abap Version krnl32nuc_7.21
SAP ≫ Netweaver Application Server Abap Version krnl32uc_7.21
SAP ≫ Netweaver Application Server Abap Version krnl64nuc_7.21
SAP ≫ Netweaver Application Server Abap Version krnl64uc_8.04
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.99% 0.582
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
SAP 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506
Vendor Advisory
https://launchpad.support.sap.com/#/notes/3032624
Permissions Required