CVE-2016-10311

Critical

Published: 10/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in SAP NetWeaver versions 7.0 through 7.5 allows remote attackers to cause a denial of service by sending a crafted packet to the SAPSTARTSRV port.

Risk Assessment

Attackers can remotely cause service outages, potentially leading to system downtime and loss of user trust.

Recommendation

It is recommended to update to the latest version of SAP NetWeaver and monitor the SAPSTARTSRV port for suspicious activity.

Original NVD description (English source)

Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238.