« Volver al listado

CVE-2015-6507

Estado: ModificadaAlta (7.2)—

The hdbsql client 1.00.091.00 Build 1418659308-1530 in SAP HANA allows local users to cause a denial of service (memory corruption) and possibly have unspecified other impact via unknown vectors, aka SAP Security Note 2140700.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

SAP — Hana

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-6507",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": true,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-10-15T20:59:00.113",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/133760/SAP-HANA-hdbsql-Memory-Corruption.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2015/Sep/109",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.onapsis.com/research/security-advisories/sap-hana-multiple-memory-corruption-vulnerabilities",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/133760/SAP-HANA-hdbsql-Memory-Corruption.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2015/Sep/109",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.onapsis.com/research/security-advisories/sap-hana-multiple-memory-corruption-vulnerabilities",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The hdbsql client 1.00.091.00 Build 1418659308-1530 in SAP HANA allows local users to cause a denial of service (memory corruption) and possibly have unspecified other impact via unknown vectors, aka SAP Security Note 2140700."
    },
    {
      "lang": "es",
      "value": "El cliente hdbsql 1.00.091.00 Build 1418659308-1530 en SAP HANA permite a usuarios locales causar una denegación de servicio (corrupción de memoria) y posiblemente tener otro impácto no especificado a través de vectores desconocidos, también conocido como SAP Security Note 2140700."
    }
  ],
  "lastModified": "2026-06-17T00:30:58.750",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sap:hana:1.00.091.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01F631DA-2C5D-4EE4-AB22-8B576322223F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}