Correcting buffer overflow in ABAP system call, SAP security note 1493516

SAP security note 1493516, “Correcting buffer overflow in ABAP system call.” Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

A malicious ABAP developer can exploit a buffer overflow in the SAP kernel and cause a work process to crash.

Solution

Apply the latest kernel patch that contains the patch level specified in this note.

Reason and prerequisites

The SAP kernel has a buffer overflow vulnerability. A malicious ABAP developer can exploit this vulnerability and cause a work process to crash.

CVSS

Score 0

References

• SAP Note 888889: Automatic checks for security notes using RSECNOTE (outdated)

Affected components

• KRNL32NUC 6.40 to 6.40EX2
• KRNL32NUC 7.00 to 7.01
• KRNL32NUC 7.10 to 7.11
• KRNL32UC 6.40 to 6.40EX2
• KRNL32UC 7.00 to 7.01
• KRNL32UC 7.10 to 7.11
• KRNL64NUC 6.40 to 6.40EX2
• KRNL64NUC 7.00 to 7.01
• KRNL64NUC 7.10 to 7.11
• KRNL64UC 6.40 to 6.40EX2
• KRNL64UC 7.00 to 7.01
• KRNL64UC 7.10 to 7.11
• SAP_BASIS 720 to 730
• KERNEL 6.40
• KERNEL 7.00
• KERNEL 7.10