CVE-2022-22533Use After Free in SE SAP Netweaver Application Server Java

CWE-416Use After Free3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.8%
top 26.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 9
Latest updateFeb 11

Description

Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP server requests resulting in errors, such that it consumes the memory buffer. This could result in system shutdown rendering the system unavailable.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-qgqm-qrq8-vrcp: Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 72022-02-11
CVEList
CVE-2022-22533: Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 72022-02-09
CVE-2022-22533 — Use After Free | cvebase