CVE:CVE-2014-8587
CNNVD:CNNVD-201411-043
SAPCRYPTOLIB、SAPSECULIB和CommonCryptoLib都是德国思爱普（SAP）公司的用于SAP服务器中的安全库。SAPCRYPTOLIB是一个SAP扩展安全库；SAPSECULIB是一个SAP标准安全库。
SAP NetWeaver AS for ABAP和SAP HANA中使用的多款SAP产品中存在安全漏洞。远程攻击者可利用该漏洞伪造Digital Signature Algorithm (DSA)签名。以下产品和版本受到影响：SAPCRYPTOLIB 5.555.38之前版本、SAPSECULIB和CommonCryptoLib 8.4.30之前版本。
solution:Upgrade sap commoncryptolib to a higher version than 8.4.29,and avoid the version (,8.4.29]; Upgrade sap sapcrytolib to a higher version than 5.555.37,and avoid the version (,5.555.37]; Upgrade sap sapseculib to a higher version than -; Upgrade sap hana to a higher version than -; Upgrade sap netweaver to a higher version than *