Memory Corruption vulnerability in SAP Host Agent (SAPOSCOL)

CVE-2023-27498

What is CVE-2023-27498?

The SAP Host Agent (SAPOSCOL) version 7.22 is susceptible to a memory corruption issue that allows unauthenticated attackers with network access to exploit a server port assigned to the SAP Start Service. By submitting a specially crafted request, attackers can trigger a memory corruption error. This vulnerability can potentially expose technical information about the server without the ability to modify it, and it may lead to temporary service disruptions.

References