CVE-2016-10310

MEDIUM 4.9CVE-2016-10310 · Published 10/04/2017 · updated 17/06/2026

In short

CVE-2016-10310 is a MEDIUM (CVSS 4.9) vulnerability affecting sql anywhere (sap).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 81.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sql anywhere sap	`≤ 17.0`	No fix yet

Description

Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denial of service (resource consumption and process crash) by sending a crafted packet several times, aka SAP Security Note 2308778.

References

securityfocus.com/bid/91197 · Third Party Advisory
erpscan.io/advisories/erpscan-16-024-sap-sql-anywhere-mobilink-synchronization-server-buffer-overflow

More vulnerabilities in sql anywhere

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sql anywhere

sap

≤ 17.0

No fix yet

More vulnerabilities in sql anywhere

See all →