CVE-2023-40308

Опубликовано: 12 сент. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information.

Ссылки

https://me.sap.com/notes/3327896
Permissions Required
Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
Vendor Advisory
https://me.sap.com/notes/3327896
Permissions Required
Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:commoncryptolib:8.0.0:*:*:*:*:*:*:*

cpe:2.3:a:sap:content_server:6.50:*:*:*:*:*:*:*

cpe:2.3:a:sap:content_server:7.53:*:*:*:*:*:*:*

cpe:2.3:a:sap:content_server:7.54:*:*:*:*:*:*:*

cpe:2.3:a:sap:extended_application_services_and_runtime:1.0:*:*:*:*:*:*:*

cpe:2.3:a:sap:hana_database:2.0:*:*:*:*:*:*:*

cpe:2.3:a:sap:host_agent:722:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:7.22ext:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel_7.22:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel_7.53:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel_7.54:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel_7.77:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel_7.85:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel_7.89:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel_7.91:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel_7.92:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel_7.93:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel_8.04:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel64nuc_7.22:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel64nuc_7.22ext:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel64uc_7.22:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel64uc_7.22ext:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel64uc_7.53:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:kernel64uc_8.04:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel_7.22:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel_7.53:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel_7.54:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel_7.77:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel_7.85:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel_7.89:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel_7.91:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel_7.92:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel_7.93:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel_8.04:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel64nuc_7.22:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel64nuc_7.22ext:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel64uc_7.22:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel64uc_7.22ext:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel64uc_7.53:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:kernel64uc_8.04:*:*:*:*:*:*:*

cpe:2.3:a:sap:sapssoext:17.0:*:*:*:*:*:*:*

cpe:2.3:a:sap:web_dispatcher:7.22ext:*:*:*:*:*:*:*

cpe:2.3:a:sap:web_dispatcher:7.53:*:*:*:*:*:*:*

cpe:2.3:a:sap:web_dispatcher:7.54:*:*:*:*:*:*:*

cpe:2.3:a:sap:web_dispatcher:7.77:*:*:*:*:*:*:*

cpe:2.3:a:sap:web_dispatcher:7.85:*:*:*:*:*:*:*

cpe:2.3:a:sap:web_dispatcher:7.89:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00131

Низкий

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-qr3g-7vmg-24hh

CVSS3: 7.5

github

больше 2 лет назад

BDU:2023-07394

CVSS3: 7.5

fstec

больше 2 лет назад

Уязвимость библиотеки SAP CommonCryptoLib, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 33%

0.00131

Низкий

7.5 High

CVSS3

Дефекты

CWE-787