Security issues fixed in SAP HANA Revision 28 and later, SAP security note 1726160

SAP security note 1726160, “Security issues fixed in SAP HANA Revision 28 and later”, is a release planning information note released on 10.07.2012. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Several security vulnerabilities were discovered and subsequently fixed in revision 28 and later of SAP HANA. A malicious user can remotely exploit HANA to terminate it manually. The issues are caused by memory corruption errors that can cause processes to terminate. A malicious user can provoke a condition in which the process attempts to read outside its memory space, causing a memory protection fault. As a result, the system terminates the process, rendering the application unusable until it is restarted.

Solution

Update your SAP HANA to the newest available revision.

Affected components

• HDB: 1.00 to 1.00
• HDB_CLIENT: 1.00 to 1.00