CVE-2016-3638

SAP SLD Registration Program (aka SLDREG) allows local users to cause a denial of service (memory corruption and process termination) via a crafted HOST parameter, aka SAP Security Note 2125623.

• CWE-119

• http://packetstormsecurity.com/files/139096/SAP-SLDREG-Memory-Corruption.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Oct/52Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/93500Broken Link
• https://www.onapsis.com/blog/analyzing-sap-security-notes-august-2015-editionThird Party Advisory
• https://www.onapsis.com/research/security-advisories/sap-sldreg-memory-corruptionPermissions Required
• http://packetstormsecurity.com/files/139096/SAP-SLDREG-Memory-Corruption.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Oct/52Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/93500Broken Link
• https://www.onapsis.com/blog/analyzing-sap-security-notes-august-2015-editionThird Party Advisory
• https://www.onapsis.com/research/security-advisories/sap-sldreg-memory-corruptionPermissions Required

Published

Oct 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3630The binary delta decoder in Mercurial before 3.7.3 allows re…8.8
• CVE-2016-3631The (1) cpStrips and (2) cpTiles functions in the thumbnail …
• CVE-2016-3632The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.…
• CVE-2016-3633The setrow function in the thumbnail tool in LibTIFF 4.0.6 a…
• CVE-2016-3634The tagCompare function in tif_dirinfo.c in the thumbnail to…
• CVE-2016-3635SAP Netweaver 7.4 allows remote authenticated users to bypas…
• CVE-2016-3639SAP HANA DB 1.00.091.00.1418659308 allows remote attackers t…
• CVE-2016-3640The Extended Application Services (aka XS or XS Engine) in S…
• CVE-2016-3642The RMI service in SolarWinds Virtualization Manager 6.3.1 a…
• CVE-2016-3643SolarWinds Virtualization Manager 6.3.1 and earlier allow lo…7.8
• CVE-2016-3644The AntiVirus Decomposer engine in Symantec Advanced Threat …
• CVE-2016-3645Integer overflow in the TNEF unpacker in the AntiVirus Decom…