Buffer overflow in SAP Kernel

CVE-2014-9594

Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the ABAP VM, aka SAP Note 2059734.

Vulnerability class: Buffer Overflow

EPSS: 0.024 (82.1th percentile) — read the EPSS interpretation.

Affected products

Sap Sap_kernel — versions 7.00, 7.40
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)