CVE-2022-35299 - AskarLabs CVE Database

CVE-2022-35299

Vendor Sap Se

Product SAP SQL Anywhere

Weakness CWE-121

Published October 11, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow.

Key dates

02Disclosure timeline

October 11, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-35299 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/121.html

Related vulnerabilities

04Related CVE

CVE-2024-0922 Tenda AC10U formQuickIndex stack-based overflow CVE-2026-40510 OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c CVE-2019-0008 QFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) process CVE-2023-25115 CVE-2023-41204 D-Link DAP-1325 SetAPLanSettings SecondaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability

Identifiers

CVE CVE-2022-35299

CWE CWE-121

Affected versions

Vendor Sap Se

Product SAP SQL Anywhere

Affected 17.0

Vendor Sap Se

Product SAP IQ

Affected 16.1