Denial of Service (DoS) vulnerability in SAP SQL Anywhere

CVE-2023-33990

What is CVE-2023-33990?

This vulnerability in SAP SQL Anywhere version 17.0 for Windows allows a low privileged attacker with local access to disrupt legitimate users by causing the service to crash. By writing to shared memory objects, the attacker can initiate a Denial of Service attack, preventing user access and potentially compromising sensitive data stored in those objects. This issue does not impact other operating systems.

References