CVE-2017-5997: Missing Release of Resource after Effective Lifetime

The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service memory consumption and process crash via multiple msgserver/group?group= requests with a crafted size of the group parameter, aka SAP Security Note 2358972...

PT-2017-16817

Name of the Vulnerable Software and Affected Versions SAP KERNEL versions 7.21 through 7.49 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and process crash, via multiple requests to the msgserver/group?group= endpoint with a crafted si...