CVE-2022-28772CWE-121

By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or…

published April 12, 2022

CVSS
—
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, which makes these programs unavailable, leading to denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01443 · 73.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-04-12T16:11Z
EPSS history
Timeline
  • 12 APR 16:11Z
    By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or…
    cvelistv5