CVE-2016-10310

Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denial of service (resource consumption and process crash) by sending a crafted packet several times, aka SAP Security Note 2308778.

Score

CVSS 3.0 4.9 Medium

Status

Modified - cve@mitre.org

Published

2017-04-10

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Sql Anywhere (Sap)

References

• http://www.securityfocus.com/bid/91197
• https://erpscan.io/advisories/erpscan-16-024-sap-sql-anywhere-mobilink-synchronization-server-buffer-overflow/