CVE-2015-2815 Memory corruption in n/a

Medium 6.5 Published 1 Apr 2015 Updated 6 Aug 2024

Remote authenticated users can trigger a buffer overflow in SAP NetWeaver Dispatcher to execute arbitrary code or cause denial of service.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2015-2815?

CVE-2015-2815 is a medium-severity memory corruption vulnerability in Sap Netweaver, published on 1 Apr 2015. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Buffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000.52.12.34966) and 7.40 (7400.12.21.30308) allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, aka SAP Security Note 2063369.

Weakness: CWE-119

Which versions are affected by CVE-2015-2815?

It affects 1 product.

Products include Sap Netweaver.

How do I fix CVE-2015-2815?

No fix has been published for CVE-2015-2815 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2015-2815 being exploited?

There is no known exploitation of CVE-2015-2815 in the wild and no public exploit code.

All Sap Netweaver vulnerabilities

Sources

Also known as GHSA-x558-4jvq-g5jc.