SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Commoncryptolib | Sap | 8.0.0 (including) | 8.0.0 (including) |
| Content_server | Sap | 6.50 (including) | 6.50 (including) |
| Content_server | Sap | 7.53 (including) | 7.53 (including) |
| Content_server | Sap | 7.54 (including) | 7.54 (including) |
| Extended_application_services_and_runtime | Sap | 1.0 (including) | 1.0 (including) |
| Hana_database | Sap | 2.0 (including) | 2.0 (including) |
| Host_agent | Sap | 722 (including) | 722 (including) |
| Netweaver_application_server_abap | Sap | 7.22ext (including) | 7.22ext (including) |
| Netweaver_application_server_abap | Sap | kernel_7.22 (including) | kernel_7.22 (including) |
| Netweaver_application_server_abap | Sap | kernel_7.53 (including) | kernel_7.53 (including) |
| Netweaver_application_server_abap | Sap | kernel_7.54 (including) | kernel_7.54 (including) |
| Netweaver_application_server_abap | Sap | kernel_7.77 (including) | kernel_7.77 (including) |
| Netweaver_application_server_abap | Sap | kernel_7.85 (including) | kernel_7.85 (including) |
| Netweaver_application_server_abap | Sap | kernel_7.89 (including) | kernel_7.89 (including) |
| Netweaver_application_server_abap | Sap | kernel_7.91 (including) | kernel_7.91 (including) |
| Netweaver_application_server_abap | Sap | kernel_7.92 (including) | kernel_7.92 (including) |
| Netweaver_application_server_abap | Sap | kernel_7.93 (including) | kernel_7.93 (including) |
| Netweaver_application_server_abap | Sap | kernel_8.04 (including) | kernel_8.04 (including) |
| Netweaver_application_server_abap | Sap | kernel64nuc_7.22 (including) | kernel64nuc_7.22 (including) |
| Netweaver_application_server_abap | Sap | kernel64nuc_7.22ext (including) | kernel64nuc_7.22ext (including) |
| Netweaver_application_server_abap | Sap | kernel64uc_7.22 (including) | kernel64uc_7.22 (including) |
| Netweaver_application_server_abap | Sap | kernel64uc_7.22ext (including) | kernel64uc_7.22ext (including) |
| Netweaver_application_server_abap | Sap | kernel64uc_7.53 (including) | kernel64uc_7.53 (including) |
| Netweaver_application_server_abap | Sap | kernel64uc_8.04 (including) | kernel64uc_8.04 (including) |
| Netweaver_application_server_java | Sap | kernel_7.22 (including) | kernel_7.22 (including) |
| Netweaver_application_server_java | Sap | kernel_7.53 (including) | kernel_7.53 (including) |
| Netweaver_application_server_java | Sap | kernel_7.54 (including) | kernel_7.54 (including) |
| Netweaver_application_server_java | Sap | kernel_7.77 (including) | kernel_7.77 (including) |
| Netweaver_application_server_java | Sap | kernel_7.85 (including) | kernel_7.85 (including) |
| Netweaver_application_server_java | Sap | kernel_7.89 (including) | kernel_7.89 (including) |
| Netweaver_application_server_java | Sap | kernel_7.91 (including) | kernel_7.91 (including) |
| Netweaver_application_server_java | Sap | kernel_7.92 (including) | kernel_7.92 (including) |
| Netweaver_application_server_java | Sap | kernel_7.93 (including) | kernel_7.93 (including) |
| Netweaver_application_server_java | Sap | kernel_8.04 (including) | kernel_8.04 (including) |
| Netweaver_application_server_java | Sap | kernel64nuc_7.22 (including) | kernel64nuc_7.22 (including) |
| Netweaver_application_server_java | Sap | kernel64nuc_7.22ext (including) | kernel64nuc_7.22ext (including) |
| Netweaver_application_server_java | Sap | kernel64uc_7.22 (including) | kernel64uc_7.22 (including) |
| Netweaver_application_server_java | Sap | kernel64uc_7.22ext (including) | kernel64uc_7.22ext (including) |
| Netweaver_application_server_java | Sap | kernel64uc_7.53 (including) | kernel64uc_7.53 (including) |
| Netweaver_application_server_java | Sap | kernel64uc_8.04 (including) | kernel64uc_8.04 (including) |
| Sapssoext | Sap | 17.0 (including) | 17.0 (including) |
| Web_dispatcher | Sap | 7.22ext (including) | 7.22ext (including) |
| Web_dispatcher | Sap | 7.53 (including) | 7.53 (including) |
| Web_dispatcher | Sap | 7.54 (including) | 7.54 (including) |
| Web_dispatcher | Sap | 7.77 (including) | 7.77 (including) |
| Web_dispatcher | Sap | 7.85 (including) | 7.85 (including) |
| Web_dispatcher | Sap | 7.89 (including) | 7.89 (including) |