Vulnerability Description
SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Advanced Business Application Programming Platform Kernel | >= 7.21, <= 7.22 |
| Sap | Advanced Business Application Programming Platform Krnl32Nuc | 7.21 |
| Sap | Advanced Business Application Programming Platform Krnl32Uc | 7.21 |
| Sap | Advanced Business Application Programming Platform Krnl64Nuc | 7.21 |
| Sap | Advanced Business Application Programming Platform Krnl64Uc | 7.21 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/106972Third Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/107364Third Party AdvisoryVDB Entry
- https://launchpad.support.sap.com/#/notes/2729710Permissions RequiredVendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943Vendor Advisory
- http://www.securityfocus.com/bid/106972Third Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/107364Third Party AdvisoryVDB Entry
- https://launchpad.support.sap.com/#/notes/2729710Permissions RequiredVendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943Vendor Advisory
FAQ
What is CVE-2019-0265?
CVE-2019-0265 is a vulnerability with a CVSS score of 4.9 (MEDIUM). SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, ...
How severe is CVE-2019-0265?
CVE-2019-0265 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-0265?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Advanced Business Application Programming Platform Kernel, Sap Advanced Business Application Programming Platform Krnl32Nuc, Sap Advanced Business Application Programming Platform Krnl32Uc, Sap Advanced Business Application Programming Platform Krnl64Nuc, Sap Advanced Business Application Programming Platform Krnl64Uc.