Stack-based Buffer Overflow in SAP MaxDB and Netweaver Products
CVE-2015-2282

Currently unrated

Key Information:

Vendor: SAP
Status: Maxdb; Gui; Netweaver Java Application Server; Netweaver Abap Application Server
Vendor: CVE Published:; 2 June 2015

Summary

A stack-based buffer overflow vulnerability exists within the LZC decompression implementation in multiple SAP products, including SAP MaxDB and Netweaver. This vulnerability can allow context-dependent attackers to potentially execute arbitrary code or cause a denial of service through unspecified vectors. It is documented in various SAP Security Notes and poses a risk to system integrity.

References

http://seclists.org/fulldisclosure/2015/May/50

mailing-listx_refsource_FULLDISC

http://www.securityfocus.com/bid/74643

vdb-entryx_refsource_BID

http://packetstormsecurity.com/files/131883/SAP-LZC-LZH-C...

x_refsource_MISC

Timeline

Vulnerability published
Jun 2, 2015
Vulnerability Reserved
Mar 10, 2015