SAP Security Note
SAP security note 1469549, "RFC: Work processes terminate in the XML parser", released on August 9, 2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
The XML parser of the RFC reports the error "Stack overflow". However, further processing of the error causes the work process to crash.
Solution
Apply a new kernel patch. This patch must have at least the patch level specified under "SP Patch Level".
Reason and prerequisites
A program error occurs when the system issues the error message. Due to a missing index check, the system accesses an uninitialized memory area.
Affected components
- SAP KERNEL 7.2L 64-BIT UNICODE: SP004 Patch Level 000004
- SAP KERNEL 7.10 32-BIT UNICODE: SP203 Patch Level 000203
- SAP KERNEL 7.10 32-BIT: SP203 Patch Level 000203
- SAP KERNEL 7.10 64-BIT UNICODE: SP203 Patch Level 000203
- SAP KERNEL 7.10 64-BIT: SP203 Patch Level 000203
- SAP KERNEL 7.11 32-BIT UNICODE: SP089 Patch Level 000089
- SAP KERNEL 7.11 32-BIT: SP089 Patch Level 000089
- SAP KERNEL 7.11 64-BIT: SP089 Patch Level 000089
- SAP KERNEL 7.11 64-BIT UNICODE: SP089 Patch Level 000089
- SAP KERNEL 7.20 32-BIT: SP052 Patch Level 000052
- SAP KERNEL 7.20 32-BIT UNICODE: SP052 Patch Level 000052
- SAP KERNEL 7.20 64-BIT: SP052 Patch Level 000052
- SAP KERNEL 7.20 64-BIT UNICODE: SP052 Patch Level 000052
- SAP KERNEL 7.01 32-BIT: SP097 Patch Level 000097
- SAP KERNEL 7.01 32-BIT UNICODE: SP097 Patch Level 000097
- SAP KERNEL 7.01 64-BIT: SP097 Patch Level 000097
- SAP KERNEL 7.01 64-BIT UNICODE: SP097 Patch Level 000097
- SAP KERNEL 6.40 32-BIT UNICODE: SP331 Patch Level 000331
- SAP KERNEL 6.40 64-BIT UNICODE: SP331 Patch Level 000331
- SAP KERNEL 6.40 32-BIT: SP331 Patch Level 000331
- SAP KERNEL 6.40 64-BIT: SP331 Patch Level 000331
- SAP KERNEL 6.40_EX2 64-BIT: SP331 Patch Level 000331
- SAP KERNEL 6.40_EX2 64-BIT UC: SP331 Patch Level 000331
- SAP KERNEL 6.40_EX2 32-BIT: SP331 Patch Level 000331
- SAP KERNEL 6.40_EX2 32-BIT UC: SP331 Patch Level 000331
- SAP KERNEL 7.00 32-BIT: SP258 Patch Level 000258
- SAP KERNEL 7.00 32-BIT UNICODE: SP258 Patch Level 000258
- SAP KERNEL 7.00 64-BIT: SP258 Patch Level 000258
- SAP KERNEL 7.00 64-BIT UNICODE: SP258 Patch Level 000258
Full note on SAP: SAP Support Launchpad note 1469549
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
