SAP WARNS OF MAXIMUM SEVERITY OVERPASS KERNEL VULNERABILITY

Summary from the TLDR InfoSec newsletter

German software company SAP has released an update that patches 20 security vulnerabilities. Of particular note is a maximum-severity buffer overflow vulnerability in the External Passport Protocol (EPP) processing library, which could allow an unprivileged attacker to run arbitrary commands as an administrator. Another missing authentication vulnerability in the SAP NetWeaver Message Server could allow unauthenticated attackers to execute malicious payloads and arbitrary commands across the full SAP system cluster.