{"id":"CVE-2024-33008","state":"PUBLISHED","title":"Memory Corruption vulnerability in SAP Replication Server","description":"SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system.","publishedAt":"2024-05-14T03:46:17.394Z","updatedAt":"2024-09-26T18:28:15.789Z","severity":{"score":4.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","source":"sap"},"assigner":"sap","products":["SAP_SE SAP Replication Server"],"affected":[{"vendor":"SAP_SE","product":"SAP Replication Server","defaultStatus":"unaffected","versions":[{"version":"16.0","status":"affected"},{"version":"16.0.3","status":"affected"},{"version":"16.0.4","status":"affected"}]}],"references":["https://me.sap.com/notes/3349468","https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html"],"weaknesses":["CWE-787"],"ingestedAt":"2026-10-29T20:07:30.303Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/33xxx/CVE-2024-33008.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-33008","state":"PUBLISHED","datePublished":"2024-05-14T03:46:17.394Z","dateUpdated":"2024-09-26T18:28:15.789Z","assignerShortName":"sap","assignerOrgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateReserved":"2024-04-23T04:04:25.522Z"},"containers":{"cna":{"title":"Memory Corruption vulnerability in SAP Replication Server","descriptions":[{"lang":"en","value":"SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system."}],"affected":[{"vendor":"SAP_SE","product":"SAP Replication Server","defaultStatus":"unaffected","versions":[{"version":"16.0","status":"affected"},{"version":"16.0.3","status":"affected"},{"version":"16.0.4","status":"affected"}]}],"references":[{"url":"https://me.sap.com/notes/3349468"},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"sap","orgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateUpdated":"2024-09-26T18:28:15.789Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-33008","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-05-28T20:01:19.039292Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:44:52.357Z"}},{"title":"CVE Program Container","references":[{"url":"https://me.sap.com/notes/3349468","tags":["x_transferred"]},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T02:27:53.435Z"}}]}}}