PT-2019-4263 · Sap · Sap Hana Database

Publicado 2019-08-13 · Atualizado 2020-08-24 · CVE-2019-0350

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SAP HANA Database versions 1.0 through 2.0

Description The issue allows an unauthorized attacker to send a malformed connection request, which crashes the indexserver of an SAP HANA instance, leading to Denial of Service. This is due to insufficient input validation in the SAP HANA Database. Exploitation of the issue may enable a remote attacker to cause a denial of service.

Recommendations For SAP HANA Database versions 1.0 through 2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-04866

CVE-2019-0350

Produtos afetados

Sap Hana Database

Referências · 6

• https://bdu.fstec.ru/vul/2019-04866 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0350 · Nota
• https://launchpad.support.sap.com/#/notes/2798243 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-0350 · Nota de Segurança
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-0350 · Aviso do Fabricante