cvelistv5 - CVE-2019-0365

CVE-2019-0365

Vulnerability from cvelistv5

Published

2019-09-10 16:15

Modified

2024-08-04 17:44

Severity ?

Summary

SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.

References

URL	Tags
cna@sap.com	https://launchpad.support.sap.com/#/notes/2786151	Permissions Required, Vendor Advisory
cna@sap.com	https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://launchpad.support.sap.com/#/notes/2786151	Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506	Vendor Advisory

Impacted products

Vendor

Product

Version

▼

SAP SE

SAP Kernel (KRNL32NUC)

Version: < 7.21
Version: < 7.21EXT
Version: < 7.22
Version: < 7.22EXT

SAP SE	SAP Kernel (KRNL32UC)	Version: < 7.21 Version: < 7.21EXT Version: < 7.22 Version: < 7.22EXT
SAP SE	SAP Kernel (KRNL64NUC)	Version: < 7.21 Version: < 7.21EXT Version: < 7.22 Version: < 7.22EXT Version: < 7.49
SAP SE	SAP Kernel (KRNL64UC)	Version: < 7.21 Version: < 7.21EXT Version: < 7.22 Version: < 7.22EXT Version: < 7.49 Version: < 7.73
SAP SE	SAP Kernel (KERNEL)	Version: < 7.21 Version: < 7.49 Version: < 7.53 Version: < 7.73 Version: < 7.76
SAP SE	SAP GUI for Windows (BC-FES-GUI)	Version: < 7.5 Version: < 7.6
SAP SE	SAP GUI for Java (BC-FES-JAV)	Version: < 7.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T17:44:16.488Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://launchpad.support.sap.com/#/notes/2786151"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SAP Kernel (KRNL32NUC)",
          "vendor": "SAP SE",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 7.21"
            },
            {
              "status": "affected",
              "version": "\u003c 7.21EXT"
            },
            {
              "status": "affected",
              "version": "\u003c 7.22"
            },
            {
              "status": "affected",
              "version": "\u003c 7.22EXT"
            }
          ]
        },
        {
          "product": "SAP Kernel (KRNL32UC)",
          "vendor": "SAP SE",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 7.21"
            },
            {
              "status": "affected",
              "version": "\u003c 7.21EXT"
            },
            {
              "status": "affected",
              "version": "\u003c 7.22"
            },
            {
              "status": "affected",
              "version": "\u003c 7.22EXT"
            }
          ]
        },
        {
          "product": "SAP Kernel (KRNL64NUC)",
          "vendor": "SAP SE",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 7.21"
            },
            {
              "status": "affected",
              "version": "\u003c 7.21EXT"
            },
            {
              "status": "affected",
              "version": "\u003c 7.22"
            },
            {
              "status": "affected",
              "version": "\u003c 7.22EXT"
            },
            {
              "status": "affected",
              "version": "\u003c 7.49"
            }
          ]
        },
        {
          "product": "SAP Kernel (KRNL64UC)",
          "vendor": "SAP SE",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 7.21"
            },
            {
              "status": "affected",
              "version": "\u003c 7.21EXT"
            },
            {
              "status": "affected",
              "version": "\u003c 7.22"
            },
            {
              "status": "affected",
              "version": "\u003c 7.22EXT"
            },
            {
              "status": "affected",
              "version": "\u003c 7.49"
            },
            {
              "status": "affected",
              "version": "\u003c 7.73"
            }
          ]
        },
        {
          "product": "SAP Kernel (KERNEL)",
          "vendor": "SAP SE",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 7.21"
            },
            {
              "status": "affected",
              "version": "\u003c 7.49"
            },
            {
              "status": "affected",
              "version": "\u003c 7.53"
            },
            {
              "status": "affected",
              "version": "\u003c 7.73"
            },
            {
              "status": "affected",
              "version": "\u003c 7.76"
            }
          ]
        },
        {
          "product": "SAP GUI for Windows (BC-FES-GUI)",
          "vendor": "SAP SE",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 7.5"
            },
            {
              "status": "affected",
              "version": "\u003c 7.6"
            }
          ]
        },
        {
          "product": "SAP GUI for Java (BC-FES-JAV)",
          "vendor": "SAP SE",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 7.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of Service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-10T16:15:26",
        "orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
        "shortName": "sap"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://launchpad.support.sap.com/#/notes/2786151"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cna@sap.com",
          "ID": "CVE-2019-0365",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SAP Kernel (KRNL32NUC)",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "\u003c",
                            "version_value": "7.21"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.21EXT"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.22"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.22EXT"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SAP Kernel (KRNL32UC)",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "\u003c",
                            "version_value": "7.21"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.21EXT"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.22"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.22EXT"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SAP Kernel (KRNL64NUC)",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "\u003c",
                            "version_value": "7.21"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.21EXT"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.22"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.22EXT"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.49"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SAP Kernel (KRNL64UC)",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "\u003c",
                            "version_value": "7.21"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.21EXT"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.22"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.22EXT"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.49"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.73"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SAP Kernel (KERNEL)",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "\u003c",
                            "version_value": "7.21"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.49"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.53"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.73"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.76"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SAP GUI for Windows (BC-FES-GUI)",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "\u003c",
                            "version_value": "7.5"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "7.6"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SAP GUI for Java (BC-FES-JAV)",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "\u003c",
                            "version_value": "7.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "SAP SE"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of Service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506",
              "refsource": "CONFIRM",
              "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506"
            },
            {
              "name": "https://launchpad.support.sap.com/#/notes/2786151",
              "refsource": "MISC",
              "url": "https://launchpad.support.sap.com/#/notes/2786151"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
    "assignerShortName": "sap",
    "cveId": "CVE-2019-0365",
    "datePublished": "2019-09-10T16:15:26",
    "dateReserved": "2018-11-26T00:00:00",
    "dateUpdated": "2024-08-04T17:44:16.488Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2019-0365\",\"sourceIdentifier\":\"cna@sap.com\",\"published\":\"2019-09-10T17:15:11.330\",\"lastModified\":\"2024-11-21T04:16:44.830\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.\"},{\"lang\":\"es\",\"value\":\"SAP Kernel (RFC), KRNL32NUC, KRNL32UC y KRNL64NUC versiones anteriores a 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, versiones anteriores a 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 y KERNEL versiones anteriores a 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) versiones anteriores a 7.5, 7.6 y SAP GUI para Java (BC-FES-JAV) anteriores a versi\u00f3n 7.5, permiten a un atacante impedir que usuarios leg\u00edtimos accedan a un servicio, ya sea mediante el bloqueo o la inundaci\u00f3n del servicio.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel:7.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1DB2B37-EC52-4FE6-9861-A98A9E365B61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel:7.49:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"018F8061-43B6-4F29-B914-C779569C58CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel:7.53:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F7EA62C-67A6-4971-AC33-D5A3D390CE52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel:7.73:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2DC3DD5-36D6-462E-BD41-E1EDB5843A8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel:7.76:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDE0BD24-5846-4C18-BC80-3C20C10DBCB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7D3942B-2628-4DBE-A45E-BB0B7720611F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.21ext:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"453954CC-8BC4-44FA-B398-EEFB9E753219\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07F567A3-D352-45CC-9FD9-A527C00AC829\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.22ext:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E606FEC-E678-470A-8CFF-EA23A7B18E37\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl32uc:7.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9F36AED-EBEC-4829-BE19-4C21A42A8333\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl32uc:7.21ext:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4BA2FE6-9AAC-421F-80F1-C1A10F7412AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl32uc:7.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECE57B68-EB51-4FA3-9E1B-6F2F5ABEBA90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl32uc:7.22ext:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B30BF5A-F8C3-42FE-A6F3-26AE4AFCE1C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"55056F3E-ADB1-4C8A-B26B-635647BC62FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.21ext:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C799F460-05EF-4639-80FF-FD46A44FE225\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BED67005-0801-4F04-9657-EBEC88ABB5A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.22ext:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"397FD4D5-A263-4366-A39F-20BECC22AB35\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl64uc:7.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B8F057A-C567-488B-9C04-0E40B0C97954\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl64uc:7.21ext:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"68A9472A-A1E8-487C-B0C2-0F61D48C3766\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl64uc:7.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE184F25-627E-4C8A-98D2-2EB0E9D2D96F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl64uc:7.22ext:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0BE71FB-A9E3-4CEC-A3B4-98B11DCD6B7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl64uc:7.49:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8952A720-B281-4265-B659-4DEE5F0BD257\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sap:sap_kernel_krnl64uc:7.73:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"709E6F88-14EA-4669-AEA5-C9C699428733\"}]}]}],\"references\":[{\"url\":\"https://launchpad.support.sap.com/#/notes/2786151\",\"source\":\"cna@sap.com\",\"tags\":[\"Permissions Required\",\"Vendor Advisory\"]},{\"url\":\"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506\",\"source\":\"cna@sap.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://launchpad.support.sap.com/#/notes/2786151\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Vendor Advisory\"]},{\"url\":\"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}

ghsa-3jfh-7px5-vr77

Vulnerability from github

Published

2022-05-24 16:55

Modified

2024-04-04 01:54

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2019-0365"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-09-10T17:15:00Z",
    "severity": "HIGH"
  },
  "details": "SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.",
  "id": "GHSA-3jfh-7px5-vr77",
  "modified": "2024-04-04T01:54:52Z",
  "published": "2022-05-24T16:55:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0365"
    },
    {
      "type": "WEB",
      "url": "https://launchpad.support.sap.com/#/notes/2786151"
    },
    {
      "type": "WEB",
      "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

gsd-2019-0365

Vulnerability from gsd

Modified

2023-12-13 01:23

Details

Aliases

CVE-2019-0365

Aliases

CVE-2019-0365

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2019-0365",
    "description": "SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.",
    "id": "GSD-2019-0365"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2019-0365"
      ],
      "details": "SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.",
      "id": "GSD-2019-0365",
      "modified": "2023-12-13T01:23:39.293950Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cna@sap.com",
        "ID": "CVE-2019-0365",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "SAP Kernel (KRNL32NUC)",
                    "version": {
                      "version_data": [
                        {
                          "version_name": "\u003c",
                          "version_value": "7.21"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.21EXT"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.22"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.22EXT"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SAP Kernel (KRNL32UC)",
                    "version": {
                      "version_data": [
                        {
                          "version_name": "\u003c",
                          "version_value": "7.21"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.21EXT"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.22"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.22EXT"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SAP Kernel (KRNL64NUC)",
                    "version": {
                      "version_data": [
                        {
                          "version_name": "\u003c",
                          "version_value": "7.21"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.21EXT"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.22"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.22EXT"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.49"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SAP Kernel (KRNL64UC)",
                    "version": {
                      "version_data": [
                        {
                          "version_name": "\u003c",
                          "version_value": "7.21"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.21EXT"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.22"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.22EXT"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.49"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.73"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SAP Kernel (KERNEL)",
                    "version": {
                      "version_data": [
                        {
                          "version_name": "\u003c",
                          "version_value": "7.21"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.49"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.53"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.73"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.76"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SAP GUI for Windows (BC-FES-GUI)",
                    "version": {
                      "version_data": [
                        {
                          "version_name": "\u003c",
                          "version_value": "7.5"
                        },
                        {
                          "version_name": "\u003c",
                          "version_value": "7.6"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SAP GUI for Java (BC-FES-JAV)",
                    "version": {
                      "version_data": [
                        {
                          "version_name": "\u003c",
                          "version_value": "7.5"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "SAP SE"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Denial of Service"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506",
            "refsource": "CONFIRM",
            "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506"
          },
          {
            "name": "https://launchpad.support.sap.com/#/notes/2786151",
            "refsource": "MISC",
            "url": "https://launchpad.support.sap.com/#/notes/2786151"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.22ext:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.49:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.73:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel:7.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel:7.49:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.22ext:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl32uc:7.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl32uc:7.21ext:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl32uc:7.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl32uc:7.22ext:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel:7.73:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.21ext:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.21ext:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel:7.53:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel:7.76:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.21ext:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.22ext:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cna@sap.com",
          "ID": "CVE-2019-0365"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://launchpad.support.sap.com/#/notes/2786151",
              "refsource": "MISC",
              "tags": [
                "Permissions Required",
                "Vendor Advisory"
              ],
              "url": "https://launchpad.support.sap.com/#/notes/2786151"
            },
            {
              "name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2020-08-24T17:37Z",
      "publishedDate": "2019-09-10T17:15Z"
    }
  }
}

fkie_cve-2019-0365

Vulnerability from fkie_nvd

Published

2019-09-10 17:15

Modified

2024-11-21 04:16

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

URL	Tags
cna@sap.com	https://launchpad.support.sap.com/#/notes/2786151	Permissions Required, Vendor Advisory
cna@sap.com	https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://launchpad.support.sap.com/#/notes/2786151	Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506	Vendor Advisory

Impacted products

Vendor	Product	Version
sap	sap_kernel	7.21
sap	sap_kernel	7.49
sap	sap_kernel	7.53
sap	sap_kernel	7.73
sap	sap_kernel	7.76
sap	sap_kernel_krnl32nuc	7.21
sap	sap_kernel_krnl32nuc	7.21ext
sap	sap_kernel_krnl32nuc	7.22
sap	sap_kernel_krnl32nuc	7.22ext
sap	sap_kernel_krnl32uc	7.21
sap	sap_kernel_krnl32uc	7.21ext
sap	sap_kernel_krnl32uc	7.22
sap	sap_kernel_krnl32uc	7.22ext
sap	sap_kernel_krnl64nuc	7.21
sap	sap_kernel_krnl64nuc	7.21ext
sap	sap_kernel_krnl64nuc	7.22
sap	sap_kernel_krnl64nuc	7.22ext
sap	sap_kernel_krnl64uc	7.21
sap	sap_kernel_krnl64uc	7.21ext
sap	sap_kernel_krnl64uc	7.22
sap	sap_kernel_krnl64uc	7.22ext
sap	sap_kernel_krnl64uc	7.49
sap	sap_kernel_krnl64uc	7.73

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1DB2B37-EC52-4FE6-9861-A98A9E365B61",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.49:*:*:*:*:*:*:*",
              "matchCriteriaId": "018F8061-43B6-4F29-B914-C779569C58CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.53:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F7EA62C-67A6-4971-AC33-D5A3D390CE52",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.73:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2DC3DD5-36D6-462E-BD41-E1EDB5843A8A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.76:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDE0BD24-5846-4C18-BC80-3C20C10DBCB1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7D3942B-2628-4DBE-A45E-BB0B7720611F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.21ext:*:*:*:*:*:*:*",
              "matchCriteriaId": "453954CC-8BC4-44FA-B398-EEFB9E753219",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "07F567A3-D352-45CC-9FD9-A527C00AC829",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.22ext:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E606FEC-E678-470A-8CFF-EA23A7B18E37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl32uc:7.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9F36AED-EBEC-4829-BE19-4C21A42A8333",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl32uc:7.21ext:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4BA2FE6-9AAC-421F-80F1-C1A10F7412AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl32uc:7.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECE57B68-EB51-4FA3-9E1B-6F2F5ABEBA90",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl32uc:7.22ext:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B30BF5A-F8C3-42FE-A6F3-26AE4AFCE1C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "55056F3E-ADB1-4C8A-B26B-635647BC62FF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.21ext:*:*:*:*:*:*:*",
              "matchCriteriaId": "C799F460-05EF-4639-80FF-FD46A44FE225",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "BED67005-0801-4F04-9657-EBEC88ABB5A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.22ext:*:*:*:*:*:*:*",
              "matchCriteriaId": "397FD4D5-A263-4366-A39F-20BECC22AB35",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B8F057A-C567-488B-9C04-0E40B0C97954",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.21ext:*:*:*:*:*:*:*",
              "matchCriteriaId": "68A9472A-A1E8-487C-B0C2-0F61D48C3766",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE184F25-627E-4C8A-98D2-2EB0E9D2D96F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.22ext:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0BE71FB-A9E3-4CEC-A3B4-98B11DCD6B7A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.49:*:*:*:*:*:*:*",
              "matchCriteriaId": "8952A720-B281-4265-B659-4DEE5F0BD257",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel_krnl64uc:7.73:*:*:*:*:*:*:*",
              "matchCriteriaId": "709E6F88-14EA-4669-AEA5-C9C699428733",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service."
    },
    {
      "lang": "es",
      "value": "SAP Kernel (RFC), KRNL32NUC, KRNL32UC y KRNL64NUC versiones anteriores a 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, versiones anteriores a 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 y KERNEL versiones anteriores a 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) versiones anteriores a 7.5, 7.6 y SAP GUI para Java (BC-FES-JAV) anteriores a versi\u00f3n 7.5, permiten a un atacante impedir que usuarios leg\u00edtimos accedan a un servicio, ya sea mediante el bloqueo o la inundaci\u00f3n del servicio."
    }
  ],
  "id": "CVE-2019-0365",
  "lastModified": "2024-11-21T04:16:44.830",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.8,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-09-10T17:15:11.330",
  "references": [
    {
      "source": "cna@sap.com",
      "tags": [
        "Permissions Required",
        "Vendor Advisory"
      ],
      "url": "https://launchpad.support.sap.com/#/notes/2786151"
    },
    {
      "source": "cna@sap.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Permissions Required",
        "Vendor Advisory"
      ],
      "url": "https://launchpad.support.sap.com/#/notes/2786151"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506"
    }
  ],
  "sourceIdentifier": "cna@sap.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2019-0365

Vulnerability from cvelistv5

ghsa-3jfh-7px5-vr77

Vulnerability from github

gsd-2019-0365

Vulnerability from gsd

fkie_cve-2019-0365

Vulnerability from fkie_nvd

Tags

Sightings

Nomenclature