625 matches found
CVE-2024-24446
An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialContextSetupResponse message sent to the AMF...
PT-2024-20391 · Magma +1 · Magma +1
Name of the Vulnerable Software and Affected Versions: Magma version 1.8.0 OAI EPC Federation version 1.20 Description: The issue is related to an out-of-bounds read in the amf as establish req function at /tasks/amf/amf as.cpp. This allows attackers to cause a Denial of Service DoS via a crafted...
CVE-2024-25009 Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability
Ericsson Packet Core Controller PCC contains a vulnerability in Access and Mobility Management Function AMF where improper input validation can lead to denial of service which may result in service degradation...
CVE-2024-25009
CVE-2024-25009 involves Ericsson Packet Core Controller (PCC) where the AMF component exposes an improper input validation issue that can cause a denial of service and potential service degradation. The vulnerability is tied to PCC; impact is described as availability loss (DoS) with adjacent att...
SUSE CVE-2020-28598
An out-of-bounds write vulnerability exists in the Admesh stlfixnormaldirections functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted AMF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
Open5GS has an unspecified vulnerability (CNVD-2025-18584)
Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a security vulnerability that can be exploited by an attacker to cause AMF to crash...
CVE-2024-34475
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...
CVE-2024-34476
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...
CVE-2024-34476
Open5GS before 2.7.1 is affected by CVE-2024-34476 due to a reachable assertion in ogs_nas_encrypt (lib/nas/common/security.c) when processing NAS messages from a UE, related to pkbuf->len. This can cause an AMF crash. Evidence across multiple sources confirms the affected software and the und...
PT-2024-25926 · Open5Gs · Open5Gs
Name of the Vulnerable Software and Affected Versions: Open5GS versions prior to 2.7.1 Description: The issue is related to a reachable assertion that can cause an AMF crash via NAS messages from a UE. This occurs in the gmm state authentication function in amf/gmm-sm.c when the condition != OGS...
CVE-2024-34476
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...
CVE-2024-34475
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...
CVE-2024-34475
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...
CVE-2024-34476
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...
CVE-2024-34475
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...
CVE-2024-34475
Open5GS prior to 2.7.1 is affected by a reachable assertion that can cause an AMF crash via NAS messages from a UE. The root cause is in gmm_state_authentication within amf/gmm-sm.c for != OGS_ERROR. Affected software: Open5GS before 2.7.1. Impact is an AMF crash (service disruption). Remediation...
CVE-2024-34476
Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...
PT-2024-25927 · Open5Gs · Open5Gs
Name of the Vulnerable Software and Affected Versions: Open5GS versions prior to 2.7.1 Description: The issue is related to a reachable assertion that can cause an AMF crash via NAS messages from a UE. This occurs due to improper handling of the pkbuf-len variable in the ogs nas encrypt function...
PT-2024-1932
Name of the Vulnerable Software and Affected Versions SolarWinds Security Event Manager affected versions not specified Description The SolarWinds Security Event Manager is susceptible to a Remote Code Execution vulnerability. This issue allows an unauthenticated user to abuse SolarWinds' service...