Skip to content
OpenAdvisories
Unscored CVE-2022-22533 EUVD-2022-27679GHSA-qgqm-qrq8-vrcp

Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, …

Published Feb 9, 2022 · Updated Aug 3, 2024 · Assigned by sap

Description

Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP server requests resulting in errors, such that it consumes the memory buffer. This could result in system shutdown rendering the system unavailable.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver Application Server Java KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.53, KERNEL 7.22 —

References