CVE-2015-2282
Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver RFC SDK, GUI, RFC SDK, SAPCAR archive tool, and other products allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, aka SAP Security Note 2124806, 2121661, 2127995, and 2125316.
- Affected products
- Gui, Sap Netweaver Application Server Abap, Sap Netweaver Application Server Java, Netweaver Rfc Sdk, Rfc Sdk, Sap Maxdb, Sapcar Archive Tool, Suse
- Sap Gui
- All versions
- Sap Maxdb
- = 7.5, 7.6
- Sap Netweaver Abap Application Server
- All versions
- Sap Netweaver Java Application Server
- All versions
- Sap Netweaver Rfc Sdk
- All versions
- Sap Rfc Library
- All versions
- Fix
- Available
- CVSS 2.0
- 7.5 HIGH
- EPSS
- 3.5% (88th percentile)
- Weakness
- CWE-119
- NVD status
- Modified
- Published
- 2015-06-02
CVE-2015-2282 at NVD
No indexed exploits for CVE-2015-2282 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2015-2282 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.