Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-33684

SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRN

Description

SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.77, 7.81, 7.84, allows an attacker to send overlong content in the RFC request type thereby crashing the corresponding work process because of memory corruption vulnerability. The work process will attempt to restart itself after the crash and hence the impact on the availability is low.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP NetWeaver AS ABAP and ABAP Platform

  • < KRNL32NUC 7.21affected
  • < 7.21EXTaffected
  • < 7.22affected
  • < 7.22EXTaffected
  • < KRNL32UC 7.21affected
  • < KRNL64NUC 7.21affected
  • < 7.49affected
  • < KRNL64UC 8.04affected
  • < 7.21affected
  • < 7.53affected
  • < KERNEL 8.04affected
  • < 7.77affected
  • < 7.81affected
  • < 7.84affected

References