CVE-2022-29616: SAP SE SAP NetWeaver and ABAP Platform, грешка в

Описание

Оригинално описание

SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption.

Засегнати продукти

• SAP SE SAP NetWeaver and ABAP Platform: KRNL64NUC 7.22; 7.22EXT; 7.49; KRNL64UC 8.04; 7.22; 7.53; KERNEL 7.22; 8.04; 7.77; 7.81; 7.85; 7.86; 7.87; 7.88
• SAP SE SAP Host Agent: 7.22

Вид слабост

• CWE-787 Out-of-bounds Write

История

Други уязвимости в SAP SE SAP NetWeaver and ABAP Platform

• CVE-2022-27668
• CVE-2022-28774
• 9.8CVE-2022-22536
• 7.2CVE-2020-6234
• 7.5CVE-2020-6186

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-29616
• https://nvd.nist.gov/vuln/detail/CVE-2022-29616
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
• https://launchpad.support.sap.com/#/notes/3145702