CVE-2019-0265
SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.
- Score
- CVSS 3.0 4.9 Medium
- Status
- Modified - cna@sap.com
- Published
- 2019-02-15
- Last modified
- 2024-08-04
- Weaknesses
- CWE-611
Affected products
- Advanced Business Application Programming Platform Kernel (Sap)
- Advanced Business Application Programming Platform Krnl32nuc (Sap)
- Advanced Business Application Programming Platform Krnl32uc (Sap)
- Advanced Business Application Programming Platform Krnl64nuc (Sap)
- Advanced Business Application Programming Platform Krnl64uc (Sap)
- Abap Platform Kernel (Sap Se)
- Abap Platform Krnl32nuc (Sap Se)
- Abap Platform Krnl32uc (Sap Se)
- Abap Platform Krnl64nuc (Sap Se)
- Abap Platform Krnl64uc (Sap Se)
References
- http://www.securityfocus.com/bid/106972
- http://www.securityfocus.com/bid/107364
- https://launchpad.support.sap.com/#/notes/2729710
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
