PT-2015-2577 · Sap · Sap Hana

Mathieu Geli · Published 2015-10-27 · Updated 2018-12-10 · CVE-2015-7986

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP HANA version 1.00.095

Description The issue is caused by a buffer overflow in the index server component of the SAP HANA database management system. This allows remote attackers to execute arbitrary code or cause a denial of service via a specially crafted HTTP request.

Recommendations For SAP HANA version 1.00.095, apply the fix as described in SAP Security Note 2197428 to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-11942

CVE-2015-7986

Affected Products

Sap Hana

References · 10

• 🔥 http://packetstormsecurity.com/files/135416/SAP-HANA-hdbindexserver-Memory-Corruption.html · Exploit
• 🔥 https://exploit-db.com/exploits/39382 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7986 · Security Note
• http://scn.sap.com/community/security/blog/2015/10/14/sap-security-notes-october-2015--review · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11942 · Security Note
• https://erpscan.io/advisories/erpscan-15-024-sap-hana-hdbindexserver-memory-corruption · Note
• http://securityfocus.com/archive/1/537376/100/0/threaded · Note
• https://websmp230.sap-ag.de/sap/support/notes/2197428 · Note
• http://seclists.org/fulldisclosure/2016/Jan/94 · Note
• http://erpscan.com/advisories/erpscan-15-024-sap-hana-hdbindexserver-memory-corruption · Note