CVE-2018-2386

CVE-2018-2386 describes an out-of-bounds buffer overflow vulnerability in SAP Internet Graphics Server (IGS) versions 7.20, 7.20EXT, 7.45, 7.49, and 7.53. This flaw allows a malicious authenticated user to trigger a denial-of-service condition, preventing legitimate users from accessing the IGS. With a CVSS score of 6.5 (Medium), the vulnerability is network-exploitable with low attack complexity, requiring low privileges, and primarily impacts availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog. Community discussion and media coverage are minimal, with only one article from SecurityWeek mentioning its resolution in SAP's February 2018 patches.