CVE Catalog
CVE-2016-1929
CriticalSummary
The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files, potentially leading to denial of service (disk consumption and process crash) via a crafted HTTP request.
Risk Assessment
Attackers can exploit this vulnerability to disrupt system operations, potentially causing significant operational issues for the organization.
Recommendation
It is recommended to update SAP HANA to the latest version and monitor logs for suspicious activities.
Original NVD description (English source)
The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service (disk consumption and process crash) via a crafted HTTP request, related to an unspecified debug function, aka SAP Security Note 2241978.