SAP CommonCryptoLib Memory Corruption Vulnerability Leading to Denial-of-Service

A vulnerability in SAP CommonCryptoLib allows for memory corruption due to insufficient boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network. This flaw can cause an application crash, significantly impacting availability. However, there is no effect on confidentiality or integrity.

Impact

Exploitation of this vulnerability can lead to memory corruption and application crashes, causing a denial-of-service condition.

Remediation

Users are advised to consult the SAP Security Notes for guidance on applying necessary patches. SAP Security Notes can be accessed through the SAP for Me platform.