Skip to main content
← All vulnerabilities
CVE-2019-0265

SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding th

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, and 4 more
None on Exploit-DB, Metasploit or GitHub

Summary

SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • SAP SE ABAP Platform (KRNL32NUC)

    fixed in 7.21; fixed in 7.21EXT; fixed in 7.22; fixed in 7.22EXT

  • SAP SE ABAP Platform (KRNL32UC)

    fixed in 7.21; fixed in 7.21EXT; fixed in 7.22; fixed in 7.22EXT

  • SAP SE ABAP Platform (KRNL64NUC)

    fixed in 7.21; fixed in 7.21EXT; fixed in 7.22; fixed in 7.22EXT; fixed in 7.49

  • SAP SE ABAP Platform (KRNL64UC)

    fixed in 7.21; fixed in 7.21EXT; fixed in 7.22; fixed in 7.22EXT; fixed in 7.49; fixed in 7.73

  • SAP SE ABAP Platform (KERNEL)

    fixed in 7.45; fixed in 7.49; fixed in 7.53; fixed in 7.73; fixed in 7.75

References 4

wiki.scn.sap.com

securityfocus.com

launchpad.support.sap.com