CVE-2024-33008

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
SAP_SE	SAP Replication Server	16.0; 16.0.3; 16.0.4

References

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-330094.2SAP Global Label Management is vulnerable to SQL injection. On exploitation the attacker can use specially crafted inputs to modify database CVE-2024-33018.5An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication rem CVE-2024-330107.5Transient DOS while parsing fragments of MBSSID IE from beacon frame.CVE-2024-330117.5Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.CVE-2024-330127.5Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.CVE-2024-330137.5Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.CVE-2024-330147.5Transient DOS while parsing ESP IE from beacon/probe response frame.CVE-2024-330157.5Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor repo CVE-2024-330166.8memory corruption when an invalid firehose patch command is invoked.CVE-2024-330187.5Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.CVE-2024-330197.5Transient DOS while parsing the received TID-to-link mapping action frame.CVE-2024-33023.7There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory