CVE-2022-35299 - SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow

Back Back to CVE browser

CRITICAL

SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow

Published Oct 11, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.15%

Description

SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow.

Affected products

Vendor SAP SE Product SAP IQ Default
unknown
Affected
- 16.1
Vendor SAP SE Product SAP SQL Anywhere Default
unknown
Affected
- 17.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
SAP SE	SAP IQ	unknown	Affected 16.1
SAP SE	SAP SQL Anywhere	unknown	Affected 17.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38189
Advisory
https://launchpad.support.sap.com/#/notes/3232021
Permissions RequiredVendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
Not ApplicableVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38189		Advisory
https://launchpad.support.sap.com/#/notes/3232021		Permissions RequiredVendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html		Not ApplicableVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner sap

Published Oct 11, 2022

Updated Aug 3, 2024

Reserved Jul 7, 2022

Link CVE-2022-35299

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-35299

Red Hat

No data

ENISA EUVD

Assigner sap

Published Oct 11, 2022

Updated Aug 3, 2024

Link EUVD-2022-38189

GitHub

No data