CVE-2024-47586

Description

SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request which could cause a null pointer dereference in the kernel. This dereference will result in the system crashing and rebooting, causing the system to be temporarily unavailable. There is no impact on Confidentiality or Integrity.

Reserved 2024-09-27 | Published 2024-11-12 | Updated 2024-11-12 | Assigner sap

Problem types

CWE-476: NULL Pointer Dereference

Product status

Default status
unaffected

KRNL64NUC 7.22
affected

7.22EXT
affected

KRNL64UC 7.22
affected

7.53
affected

8.04
affected

KERNEL 7.22
affected

7.54
affected

7.77
affected

7.89
affected

7.93
affected

9.12
affected

9.13
affected

References

me.sap.com/notes/3504390

url.sap/sapsecuritypatchday

cve.org (CVE-2024-47586)

nvd.nist.gov (CVE-2024-47586)

Download JSON