Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2016-10311

Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238.

  • Published: Apr 10, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2016-10311
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
sap / netweaver 7.3 7.3.x
sap / netweaver 7.4 7.4.x
sap / netweaver 7.0-ehp2 7.0-ehp2.x
sap / netweaver 7.0-ehp1 7.0-ehp1.x
sap / netweaver 7.3-ehp1 7.3-ehp1.x
sap / netweaver 7.0 7.0.x
sap / netweaver 7.5 7.5.x
sap / netweaver 7.0-ehp3 7.0-ehp3.x