PT-2017-16458 · Sap · Sap Adaptive Server Enterprise

Publicado 2017-01-23 · Atualizado 2018-12-10 · CVE-2017-5371

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise (ASE) version 16

Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, by sending a series of crafted requests to the Odata Server.

Recommendations For SAP Adaptive Server Enterprise (ASE) version 16, apply the fix provided in SAP Security Note 2330422 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-5371

Produtos afetados

Sap Adaptive Server Enterprise

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2017-5371 · Nota de Segurança
• https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-october-2016 · Nota
• http://securityfocus.com/bid/93545 · Nota
• https://erpscan.io/advisories/erpscan-16-036-sap-ase-odata-server-denial-service · Nota
• http://packetstormsecurity.com/files/140610/SAP-ASE-ODATA-Server-16-Denial-Of-Service.html · Nota
• http://seclists.org/fulldisclosure/2017/Jan/47 · Nota
• https://osv.dev/vulnerability/CVE-2017-5371 · Aviso do Fabricante