VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 10, 2017· Updated Jun 17, 2026

CVE-2016-10311

CVE-2016-10311

Description

Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238.

Affected products

9
  • SAP/Netweaver9 versions
    cpe:2.3:a:sap:netweaver:7.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:sap:netweaver:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.0:ehp1:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.0:ehp2:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.0:ehp3:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.3:ehp1:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:7.5:*:*:*:*:*:*:*
    • (no CPE)range: 7.0 - 7.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.