Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-40308

Memory Corruption vulnerability in SAP CommonCryptoLib

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP CommonCryptoLib

Default version status: unaffected

  • 8affected

SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise

Default version status: unaffected

  • KERNEL 7.22affected
  • KERNEL 7.53affected
  • KERNEL 7.54affected
  • KERNEL 7.77affected
  • KERNEL 7.85affected
  • KERNEL 7.89affected
  • KERNEL 7.91affected
  • KERNEL 7.92affected
  • KERNEL 7.93affected
  • KERNEL 8.04affected
  • KERNEL64UC 7.22affected
  • KERNEL64UC 7.22EXTaffected
  • KERNEL64UC 7.53affected
  • KERNEL64UC 8.04affected
  • KERNEL64NUC 7.22affected
  • KERNEL64NUC 7.22EXTaffected

SAP_SE SAP Web Dispatcher

Default version status: unaffected

  • 7.22EXTaffected
  • 7.53affected
  • 7.54affected
  • 7.77affected
  • 7.85affected
  • 7.89affected

SAP_SE SAP Content Server

Default version status: unaffected

  • 6.50affected
  • 7.53affected
  • 7.54affected

SAP_SE SAP HANA Database

Default version status: unaffected

  • 2.00affected

SAP_SE SAP Host Agent

Default version status: unaffected

  • 722affected

SAP_SE SAP Extended Application Services and Runtime (XSA)

Default version status: unaffected

  • SAP_EXTENDED_APP_SERVICES 1affected
  • XS_ADVANCED_RUNTIME 1.00affected

SAP_SE SAPSSOEXT

Default version status: unaffected

  • 17affected

References