Sap hana xs Engine Buffer Overflow Vulnerability in CVE-2016-1928)

Sap hana xs Engine Buffer Overflow Vulnerability in CVE-2016-1928)
Sap hana xs Engine Buffer Overflow Vulnerability in CVE-2016-1928)

Release date:
Updated on:

Affected Systems:

SAP HANA

Description:

CVE (CAN) ID: CVE-2016-1928

Sap hana is a relational database management system.

The hdbxsengine of sap hana has a buffer overflow vulnerability. By constructing HTTP requests, remote attackers can cause DoS attacks or execute arbitrary code.

<* Source: vendor
*>

Suggestion:

Vendor patch:

SAP
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://erpscan.com/press-center/blog/sap-security-notes-january-2016-review/

Http://erpscan.com/advisories/erpscan-16-002-sap-hana-log-injection-and-no-size-restriction/

This article permanently updates the link address: