CVE-2016-10311 Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238.
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap netweaver | = 7.0 | No fix listed |
| sap netweaver | = 7.0-ehp1 | No fix listed |
| sap netweaver | = 7.0-ehp2 | No fix listed |
| sap netweaver | = 7.0-ehp3 | No fix listed |
| sap netweaver | = 7.3 | No fix listed |
| sap netweaver | = 7.3-ehp1 | No fix listed |
| sap netweaver | = 7.4 | No fix listed |
| sap netweaver | = 7.5 | No fix listed |