NVD

Id
18245  
Name
CVE-2016-1928  
Description
Buffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to JSON, aka SAP Security Note 2241978.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-01-20  
Modified Date
2016-12-02  
Seq
2016-1928  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
100710 18245 CVE-2016-1928 http://erpscan.com/advisories/erpscan-16-005-sap-hana-hdbxsengine-json-dos/  View
100711 18245 CVE-2016-1928 http://erpscan.com/press-center/blog/sap-security-notes-january-2016-review/  View
100712 18245 CVE-2016-1928 20160420 [ERPSCAN-16-005] SAP HANA hdbxsengine JSON - DoS vulnerability  View
100713 18245 CVE-2016-1928 20160427 Re: [ERPSCAN-16-005] SAP HANA hdbxsengine JSON - DoS vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
531 JVNDB-2016-001304 SAP HANA の XS エンジンにおけるバッファオーバーフローの脆弱性 SAP HANA の XS エンジン (hdbxsengine) には、JSON に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2016-1928 88434 CVE-2016-1928 18245 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001304.html 2016-01-12 2016-01-26 View