Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-28772

By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Mana

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, which makes these programs unavailable, leading to denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP NetWeaver (Internet Communication Manager)

  • KRNL64NUC 7.22affected
  • 7.22EXTaffected
  • 7.49affected
  • KRNL64UC 7.22affected
  • 7.53affected
  • KERNEL 7.22affected
  • 7.77affected
  • 7.81affected
  • 7.85affected
  • 7.86affected

SAP SE SAP Web Dispatcher

  • 7.53affected
  • 7.77affected
  • 7.81affected
  • 7.85affected
  • 7.86affected

References