Possible Denial of Service in dispatcher, SAP security note 1453325

SAP security note 1453325, "Possible Denial of Service in dispatcher". Below are the SAP recommended solution and the affected software components.

Description

Solution

Apply the kernel patch that is mentioned in this note.

Reason and prerequisites

The problem is due to the exhaustion of system resources. An attacker can send a specific query that causes the process to use excessive system resources. As a result, no other process can use resources and the system cannot be used. An attacker can deliberately provoke this situation to trigger a Denial of Service.

Affected components

• Basis Components > Client/Server Technology > Network Interface (BC-CST-NI)
• Basis Components > Client/Server Technology > Enqueue (BC-CST-EQ)
• Basis Components > Client/Server Technology > Message Service (BC-CST-MS)
• Basis Components > Client/Server Technology > Internet Communication Manager (BC-CST-IC)
• Basis Components > Client/Server Technology > Gateway/CPIC (BC-CST-GW)
• Basis Components > Client/Server Technology > Startup Service (BC-CST-STS)
• Basis Components > Client/Server Technology > Web Dispatcher (BC-CST-WDP)
• Basis Components > Client/Server Technology > Dispatcher, Task Handler (BC-CST-DP)