Multiple SAP Products CVE-2019-0365 Unspecified Denial of Service Vulnerability

Description

Multiple SAP Products are prone to an unspecified denial-of-service vulnerability. Successful exploits may allow an attacker to cause denial-of-service conditions. SAP Kernel KRNL32NUC, KRNL32UC and KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL 7.21, 7.49, 7.53, 7.73, 7.76 are vulnerable.

Technologies Affected

• SAP Gui
• SAP KERNEL32NUC 7.21
• SAP KERNEL32NUC 7.21EXT
• SAP KERNEL32NUC 7.22
• SAP KERNEL32NUC 7.22EXT
• SAP KERNEL32UC 7.21
• SAP KERNEL32UC 7.21EXT
• SAP KERNEL32UC 7.22
• SAP KERNEL32UC 7.22EXT
• SAP KERNEL64NUC 7.21
• SAP KERNEL64NUC 7.21EXT
• SAP KERNEL64NUC 7.22
• SAP KERNEL64NUC 7.22EXT
• SAP KERNEL64UC 7.21
• SAP KERNEL64UC 7.21EXT
• SAP KERNEL64UC 7.22
• SAP KERNEL64UC 7.22EXT
• SAP KERNEL64UC 7.49
• SAP KERNEL64UC 7.73
• SAP Kernel 7.21
• SAP Kernel 7.49
• SAP Kernel 7.53
• SAP Kernel 7.73
• SAP Kernel 7.76

Recommendations

Block external access at the network boundary, unless external parties require service.
If global access isn’t needed, filter access to the affected computer at the network boundary. Restricting access to only trusted computers and networks might greatly reduce the likelihood of a successful exploit.

Deploy network intrusion detection systems to monitor network traffic for malicious activity.
Deploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from successful exploits.

Updates are available. Please see the references or vendor advisory for more information.