CVE-2021-38177: Null Pointer Dereference
SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious data in the HTTP requests over the network, this causes the SAP application to crash and has high impact on the availability of the SAP system.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this SAP CommonCryptoLib vulnerability?
The vulnerability ID for this SAP CommonCryptoLib vulnerability is CVE-2021-38177.
What is the severity of CVE-2021-38177?
CVE-2021-38177 has a severity keyword of 'high' and a severity value of 7.5.
How does CVE-2021-38177 affect SAP CommonCryptoLib?
SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to a null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious data in the HTTP requests over the network.
What is the impact of CVE-2021-38177 on the availability of the SAP system?
The vulnerability has a high impact on the availability of the SAP system as it can cause the SAP application to crash.
How can I fix the vulnerability CVE-2021-38177 in SAP CommonCryptoLib?
To fix the vulnerability, it is recommended to update SAP CommonCryptoLib to a version higher than 8.5.38.