1726160 - Security issues fixed in SAP HANA Revision 28 and later

Symptom

Several security vulnerabilities were discovered and subsequentely fixed in revision 28 and later of SAP HANA.

Other Terms

SAP HANA, XX

Reason and Prerequisites

A malicious user can remotely exploit HANA so that they can terminate it manually. The issues are caused by memory corruption errors that can cause processes to terminate. A malicious user can provoke a condition in which the process attempts to read outside its memory space, causing a memory protection fault. As a result, the system terminates the process, rendering the application unusable until it is restarted.

Solution

Update your SAP HANA to the newest available revision.

Header Data

Released On	08.06.2012 09:04:11
Release Status	Released for Customer
Component	HAN-DB SAP HANA Database
Priority	Correction with high priority
Category	Release planning information