{"id":"CVE-2019-0265","aliases":["EUVD-2019-1038","GHSA-5g9g-w9x5-3rfc"],"status":"published","title":"SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a...","description":"SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.","severity":{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02054,"percentile":0.8141,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-611"],"published":"2019-02-15T18:00:00Z","modified":"2026-06-17T02:08:05Z","products":[{"vendor":"sap","product":"advanced_business_application_programming_platform_kernel"},{"vendor":"sap","product":"advanced_business_application_programming_platform_krnl32nuc"},{"vendor":"sap","product":"advanced_business_application_programming_platform_krnl32uc"},{"vendor":"sap","product":"advanced_business_application_programming_platform_krnl64nuc"},{"vendor":"sap","product":"advanced_business_application_programming_platform_krnl64uc"},{"vendor":"sap se","product":"abap platform (kernel)"},{"vendor":"sap se","product":"abap platform (krnl32nuc)"},{"vendor":"sap se","product":"abap platform (krnl32uc)"},{"vendor":"sap se","product":"abap platform (krnl64nuc)"},{"vendor":"sap se","product":"abap platform (krnl64uc)"}],"references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/106972","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://launchpad.support.sap.com/#/notes/2729710","tags":["x_refsource_MISC","x_transferred","Permissions Required","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/107364","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0265"},{"url":"https://github.com/advisories/GHSA-5g9g-w9x5-3rfc"}],"sources":{"cve":[{"id":"CVE-2019-0265","description":"SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.","status":"published","published":"2019-02-15T18:00:00Z","modified":"2024-08-04T17:44:16.194Z","updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-1038","description":"SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.","status":"published","published":"2019-02-15T18:00:00Z","modified":"2024-08-04T17:44:16Z","updated_at":"2026-11-03T03:07:02.049822Z"}],"ghsa":[{"id":"GHSA-5g9g-w9x5-3rfc","title":"SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a...","description":"SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.","status":"published","published":"2022-05-14T01:21:26Z","modified":"2023-02-02T05:03:35Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:51:40.509164Z"}],"nvd":[{"id":"CVE-2019-0265","description":"SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.","status":"published","published":"2019-02-15T18:29:01.883Z","modified":"2026-06-17T02:08:05.84Z","cvss":[{"version":"3.0","score":4.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:05:04.689371Z"}]}}
