SAP security note 1645982, "Security issues fixed in SAP HANA Revision 18". Below are the symptom and SAP recommended solution.
Description
Symptom
A security vulnerability was discovered and subsequently fixed in revision 18 of SAP HANA.
Memory Corruption
A malicious user can remotely exploit HANA to terminate it manually. The issue is caused by a memory corruption that causes the process to terminate. A malicious user can provoke a condition in which the process attempts to read outside its memory space, causing a memory protection fault. As a result, the system terminates the process, rendering the application unusable until it is restarted.
Solution
Update your SAP HANA to Revision 18 or higher.
Reason and prerequisites
Details of the vulnerability are described below:
Memory Corruption
A malicious user can remotely exploit HANA to terminate it manually. The issue is caused by a memory corruption that causes the process to terminate. A malicious user can provoke a condition in which the process attempts to read outside its memory space, causing a memory protection fault. As a result, the system terminates the process, rendering the application unusable until it is restarted.
Full note on SAP: SAP Support Launchpad note 1645982
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].