description: By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, which makes these programs unavailable, leading to denial of service.
problem types: CWE-121
affected:
{
product: SAP NetWeaver (Internet Communication Manager)
vendor: SAP SE
versions:
status: affected, version: KRNL64NUC 7.22
status: affected, version: 7.22EXT
status: affected, version: 7.49
status: affected, version: KRNL64UC 7.22
status: affected, version: 7.53
status: affected, version: KERNEL 7.22
status: affected, version: 7.77
status: affected, version: 7.81
status: affected, version: 7.85
status: affected, version: 7.86
}
{
product: SAP Web Dispatcher
vendor: SAP SE
versions:
status: affected, version: 7.53
status: affected, version: 7.77
status: affected, version: 7.81
status: affected, version: 7.85
status: affected, version: 7.86
}
