CVE-2015-2282

Related Files

SAP LZC/LZH Compression Denial Of Service

Posted May 13, 2015

Authored by Core Security Technologies, Martin Gallo | Site coresecurity.com

Core Security Technologies Advisory - SAP products make use of a proprietary implementation of the Lempel-Ziv-Thomas (LZC) adaptive dictionary compression algorithm and the Lempel-Ziv-Huffman (LZH) compression algorithm. These compression algorithms are used across several SAP products and programs. Vulnerabilities were found in the decompression routines that could be triggered in different scenarios, and could lead to execution of arbitrary code and denial of service conditions.

tags | advisory, denial of service, arbitrary, vulnerability

advisories | CVE-2015-2278, CVE-2015-2282

SHA-256 | b7740dd59be457ef9148466ce77bd2cb7d93fd8bf564a611bcde64e3a811e628

Download | Favorite | View