CVE-2022-29616
First published: Wed May 11 2022(Updated: )
SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap Netweaver As Abap Kernel | =7.22 | |
| Sap Netweaver As Abap Kernel | =7.49 | |
| Sap Netweaver As Abap Kernel | =7.53 | |
| Sap Netweaver As Abap Kernel | =7.77 | |
| Sap Netweaver As Abap Kernel | =7.81 | |
| Sap Netweaver As Abap Kernel | =7.85 | |
| Sap Netweaver As Abap Kernel | =7.86 | |
| Sap Netweaver As Abap Kernel | =7.87 | |
| Sap Netweaver As Abap Kernel | =8.04 | |
| Sap Netweaver As Abap Krnl64nuc | =7.22 | |
| Sap Netweaver As Abap Krnl64nuc | =7.22ext | |
| Sap Netweaver As Abap Krnl64nuc | =7.49 | |
| Sap Netweaver As Abap Krnl64uc | =7.22 | |
| Sap Netweaver As Abap Krnl64uc | =7.22ext | |
| Sap Netweaver As Abap Krnl64uc | =7.49 | |
| Sap Netweaver As Abap Krnl64uc | =7.53 | |
| Sap Netweaver As Abap Krnl64uc | =8.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this SAP Host Agent vulnerability?
The vulnerability ID for this SAP Host Agent vulnerability is CVE-2022-29616.
What is the severity of CVE-2022-29616?
The severity of CVE-2022-29616 is high.
Which software versions are affected by CVE-2022-29616?
The following versions of SAP NetWeaver and ABAP Platform are affected by CVE-2022-29616: 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 8.04.
How does this vulnerability allow an attacker to cause a memory corruption?
This vulnerability allows an attacker to leverage logical errors in memory management to cause a memory corruption.
Where can I find more information about CVE-2022-29616?
You can find more information about CVE-2022-29616 in the SAP note 3145702 and the SAP security advisory.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap netweaver as abap kernel
- version/sap netweaver as abap kernel/7.22
- version/sap netweaver as abap kernel/7.49
- version/sap netweaver as abap kernel/7.53
- version/sap netweaver as abap kernel/7.77
- version/sap netweaver as abap kernel/7.81
- version/sap netweaver as abap kernel/7.85
- version/sap netweaver as abap kernel/7.86
- version/sap netweaver as abap kernel/7.87
- version/sap netweaver as abap kernel/8.04
- canonical/sap netweaver as abap krnl64nuc
- version/sap netweaver as abap krnl64nuc/7.22
- version/sap netweaver as abap krnl64nuc/7.22ext
- version/sap netweaver as abap krnl64nuc/7.49
- canonical/sap netweaver as abap krnl64uc
- version/sap netweaver as abap krnl64uc/7.22
- version/sap netweaver as abap krnl64uc/7.22ext
- version/sap netweaver as abap krnl64uc/7.49
- version/sap netweaver as abap krnl64uc/7.53
- version/sap netweaver as abap krnl64uc/8.04