CVE Vulnerabilities

CVE-2024-30218

Multiple Binds to the Same Port

Published: Apr 09, 2024 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability.

Weakness

When multiple sockets are allowed to bind to the same port, other services on that port may be stolen or spoofed.

Potential Mitigations

References