Sap hana xs engine DoS Vulnerability (CVE-2016-1929)

Sap hana xs engine DoS Vulnerability (CVE-2016-1929)
Sap hana xs engine DoS Vulnerability (CVE-2016-1929)

Release date:
Updated on:

Affected Systems:

SAP HANA

Description:

CVE (CAN) ID: CVE-2016-1929

Sap hana is a relational database management system.

Sap hana's XS engine has security vulnerabilities. By constructing HTTP requests, remote attackers can forge logs in the tracking file and then cause denial of service (Disk depletion and process crash ).

<* Source: vendor
*>

Suggestion:

Vendor patch:

SAP
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://erpscan.com/press-center/blog/sap-security-notes-january-2016-review/

Http://erpscan.com/advisories/erpscan-16-002-sap-hana-log-injection-and-no-size-restriction/

This article permanently updates the link address: