SAP SE SAP Kernel (KRNL32NUC)
En bref
- Source
- NVD
- EPSS
- EPSS 1.41 % · centile 73 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- sap
- Statut NVD
- Modified
Rechercher sur…
Description
SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | HIGH 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2019-1138
- GCVE · GCVE-0-2019-0365
Avis du CERT-FR
- CERTFR-2019-AVI-514 — Multiples vulnérabilités dans plusieurs produits SAP · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:a:sap:sap_kernel:7.21:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel:7.49:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel:7.53:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel:7.73:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel:7.76:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.21:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.21ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.22:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.22ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32uc:7.21:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32uc:7.21ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32uc:7.22:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32uc:7.22ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.21:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.21ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.22:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.22ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.21:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.21ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.22:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.22ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.49:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.73:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| SAP SE · SAP Kernel (KRNL32NUC) | affected < 7.21 ; affected < 7.21EXT ; affected < 7.22 ; affected < 7.22EXT |
| SAP SE · SAP Kernel (KRNL32UC) | affected < 7.21 ; affected < 7.21EXT ; affected < 7.22 ; affected < 7.22EXT |
| SAP SE · SAP Kernel (KRNL64NUC) | affected < 7.21 ; affected < 7.21EXT ; affected < 7.22 ; affected < 7.22EXT ; affected < 7.49 |
| SAP SE · SAP Kernel (KRNL64UC) | affected < 7.21 ; affected < 7.21EXT ; affected < 7.22 ; affected < 7.22EXT ; affected < 7.49 ; affected < 7.73 |
| SAP SE · SAP Kernel (KERNEL) | affected < 7.21 ; affected < 7.49 ; affected < 7.53 ; affected < 7.73 ; affected < 7.76 |
| SAP SE · SAP GUI for Windows (BC-FES-GUI) | affected < 7.5 ; affected < 7.6 |
| SAP SE · SAP GUI for Java (BC-FES-JAV) | affected < 7.5 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |