2733 matches found
PT-2025-1406 · Open5Gs · Open5Gs Mme
Name of the Vulnerable Software and Affected Versions: Open5GS MME versions = 2.6.4 Description: The issue concerns an assertion in Open5GS MME that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Context Release Request message missing a...
CVE-2023-37015
Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a Path Switch Request message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37013
Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a sufficiently large ASN.1 packet over the S1AP interface. An attacker may repeatedly send such an oversized packet to cause the ogssctprecvmsg routine to reach an unexpected network state and crash, leading to...
CVE-2023-37021
The Open5GS MME (versions
CVE-2023-37016
Open5GS MME versions
CVE-2023-37018
Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Capability Info Indication message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37003
Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an "E-RAB Setup Response" message missing a required "MMEUES1APID" field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37018
Open5GS MME versions
CVE-2023-37014
Open5GS MME versions
CVE-2023-37013
The Open5GS MME component in versions
CVE-2023-37011
Open5GS MME versions
CVE-2023-37007
Open5GS MME versions
CVE-2023-37005
Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an Initial Context Setup Failure message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37005
Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an "Initial Context Setup Failure" message missing a required "MMEUES1APID" field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37005
The Open5GS MME component in versions
CVE-2024-34235
Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an "Initial UE Message" missing a required "NASPDU" field to repeatedly crash the MME, resulting in denial of service...
CVE-2024-34235
Open5GS MME versions
CVE-2023-37021
Open5GS MME version = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a "UE Context Modification Failure" message missing a required "MMEUES1APID" field to repeatedly crash the MME, resulting in denial of servic...
CVE-2023-37004
Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an "Initial Context Setup Response" message missing a required "MMEUES1APID" field to repeatedly crash the MME, resulting in denial of servic...
CVE-2023-37016
Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a "UE Context Modification Response" message missing a required "MMEUES1APID" field to repeatedly crash the MME, resulting in denial of servi...