PT-2017-7851 · Sap · Sap Sql Anywhere

Publicado 2017-04-10 · Atualizado 2018-12-10 · CVE-2016-10310

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP SQL Anywhere versions 17 and earlier

Description The issue is related to a buffer overflow in the MobiLink Synchronization Server component. This allows remote authenticated users to cause a denial of service by sending a crafted packet several times, resulting in resource consumption and process crash.

Recommendations For SAP SQL Anywhere versions 17 and earlier, apply the fix provided in SAP Security Note 2308778 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-10310

Produtos afetados

Sap Sql Anywhere

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-10310 · Nota de Segurança
• https://erpscan.io/advisories/erpscan-16-024-sap-sql-anywhere-mobilink-synchronization-server-buffer-overflow · Nota
• https://osv.dev/vulnerability/CVE-2016-10310 · Aviso do Fabricante
• http://securityfocus.com/bid/91197 · Nota