| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver | = 7.22ext= 7.49= 7.53= 7.77= 7.81= 7.85= 7.86= kernel_7.22= krnl64nuc_7.22= krnl64uc_7.22 | |
| web dispatcher | = 7.53= 7.77= 7.81= 7.85= 7.86 |
By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, which makes these programs unavailable, leading to denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free