CVE-2016-10311

CRITICAL

SAP NetWeaver 7.0-7.5 - Denial of Service via SAPSTARTSRV Port Crafted Packet

Title source: llm

Description

Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://erpscan.io/advisories/erpscan-16-030-sap-netweaver-sapstartsrv-stack-based-buffer-overflow/

Scores

CVSS v3 9.8

EPSS 0.0679

EPSS Percentile 91.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (4)

sap/netweaver 7.0 (4 CPE variants)

sap/netweaver 7.3 (2 CPE variants)

sap/netweaver 7.4

sap/netweaver 7.5

Published Apr 10, 2017

Tracked Since Feb 18, 2026