137 matches found
CVE-2022-41259
CVE-2022-41259 affects SAP SQL Anywhere 17.0. An authenticated attacker can crash the server by sending queries that use the ARRAY constructor, resulting in a denial of service and availability impact. The CVSS base score is 6.5 (Medium); attack vector Network, low attack complexity, privileges r...
CVE-2022-41259: Improper Neutralization of Special Elements used in an SQL Command
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use an ARRAY constructor...
PT-2022-6134 · Sap · Sap Sql Anywhere
Name of the Vulnerable Software and Affected Versions: SAP SQL Anywhere version 17.0 Description: The issue is related to the lack of protection for the SQL query structure in SAP SQL Anywhere. An authenticated attacker can exploit this by crashing the server with specially crafted queries that u...
SAP SQL Anywhere security vulnerabilities
SAP SQL Anywhere is an SAP-specific relational database management system from SAP, Germany. A security vulnerability in SAP SQL Anywhere version 17.0 exists because it allows an authenticated attacker to prevent legitimate users from accessing the SQL Anywhere database server by crashing the...
CVE-2022-35299
SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow...
CVE-2022-35299
SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow...
CVE-2022-35299
SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow...
Stack overflow
SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow...
CVE-2022-35299
CVE-2022-35299 — SAP SQL Anywhere 17.0 and SAP IQ 16.1 : The issue stems from logical errors in memory management that can cause memory corruption, including stack-based buffer overflows. Public advisories and third-party reports indicate this can enable remote code execution on affected installa...
CVE-2022-35299: Stack-based Buffer Overflow
SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow...
SAP SQL Anywhere Denial of Service Vulnerability
SAP SQL Anywhere is an SAP-specific relational database management system from SAP, a German company. SAP SQL Anywhere suffers from a denial-of-service vulnerability that can be exploited by an authenticated attacker to crash the server and prevent legitimate users from accessing the SQL Anywhere...
CVE-2022-27670
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers...
CVE-2022-27670
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers...
CVE-2022-27670
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers...
Code injection
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers...
CVE-2022-27670
SAP SQL Anywhere 17.0 is affected by a denial-of-service vulnerability (CVE-2022-27670). An authenticated attacker can crash the server with certain queries that use indirect identifiers, preventing legitimate users from accessing the database. Red Hat and CNVD entries confirm the same descriptio...
CVE-2022-27670
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers...
CVE-2022-27670: Improper Control of Resource Identifiers
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers...
PT-2022-18562
Name of the Vulnerable Software and Affected Versions SAP SQL Anywhere version 17.0 Description The issue allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers...
SAP SQL Anywhere security vulnerabilities
SAP SQL Anywhere is an SAP-specific relational database management system from SAP, a German company. SAP SQL Anywhere suffers from a denial-of-service vulnerability that can be exploited by an authenticated attacker to crash the server and prevent legitimate users from accessing the SQL Anywhere...