CVE-2016-1929: Input Validation
The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service (disk consumption and process crash) via a crafted HTTP request, related to an unspecified debug function, aka SAP Security Note 2241978.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1929?
CVE-2016-1929 is considered a high severity vulnerability due to its potential to enable denial of service attacks.
How do I fix CVE-2016-1929?
To fix CVE-2016-1929, it is recommended to apply the relevant SAP security patches as detailed in SAP Security Note 2241978.
Who is affected by CVE-2016-1929?
CVE-2016-1929 affects systems running SAP HANA, allowing remote attackers to exploit the vulnerability.
What kind of attack can CVE-2016-1929 facilitate?
CVE-2016-1929 can facilitate log spoofing attacks which may lead to denial of service due to disk consumption and process crashes.
What is the nature of the vulnerability in CVE-2016-1929?
CVE-2016-1929 allows remote attackers to send crafted HTTP requests that can manipulate log entries in SAP HANA's trace files.