CVEvulnerability

CVE-2021-33684

5.3 MEDIUM Published 2021-07-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-07-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-787

Description

SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.77, 7.81, 7.84, allows an attacker to send overlong content in the RFC request type thereby crashing the corresponding work process because of memory corruption vulnerability. The work process will attempt to restart itself after the crash and hence the impact on the availability is low.

Affected configurations

• sap netweaver abap 7.21 • sap netweaver abap 7.21ext • sap netweaver abap 7.22 • sap netweaver abap 7.22ext • sap netweaver abap 7.49 • sap netweaver abap 7.53 • sap netweaver abap 7.77 • sap netweaver abap 7.81 • sap netweaver abap kernel 8.04 • sap netweaver abap krnl32nuc 7.21 • sap netweaver abap krnl32uc 7.21 • sap netweaver abap krnl64nuc 7.21 • sap netweaver abap krnl64uc 8.04 • sap netweaver application server abap 7.21 • sap netweaver application server abap 7.21ext • sap netweaver application server abap 7.22 • sap netweaver application server abap 7.22ext • sap netweaver application server abap 7.49 • sap netweaver application server abap 7.53 • sap netweaver application server abap 7.77 • sap netweaver application server abap 7.81 • sap netweaver application server abap kernel 8.04 • sap netweaver application server abap krnl32nuc 7.21 • sap netweaver application server abap krnl32uc 7.21 • sap netweaver application server abap krnl64nuc 7.21 • sap netweaver application server abap krnl64uc 8.04

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References