sigcorr

SigCorr Passive Cross-Protocol Attack Detection for Mobile Core Networks SigCorr is the first open-source tool to detect cross-protocol attack chains spanning SS7/MAP, Diameter S6a, and GTPv2-C through unified subscriber identity correlation. Features Cross-protocol correlation — Links SS7/MAP,...

CVE-2024-14043

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

CVE-2024-14043

Open5GS contains a vulnerability (CVE-2024-14043) in the Diameter S6a interface. The flaw resides in the mme_s6a_subscription_data_from_avp function (src/mme/mme-fd-path.c), where manipulating the msisdn_len argument can trigger a heap-based buffer overflow. This can be exploited remotely over th...

CVE-2024-14043

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

CVE-2024-14043 Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

CVE-2024-14042

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hssogsdiams6aaircb/hssogsdiams6aulrcb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to...

EUVD-2024-55714

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hssogsdiams6aaircb/hssogsdiams6aulrcb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to...

CVE-2024-14042 Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hssogsdiams6aaircb/hssogsdiams6aulrcb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to...

CVE-2024-14042

Open5GS Diameter S6a (src/hss/hss-s6a-path.c) contains a stack-based overflow in hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr_cb triggered by manipulating os.len. The issue is exploitable remotely and affects Open5GS up to 2.7.1. Upgrading to version 2.7.2 mitigates the vulnerability; the patch i...

CVE-2024-14042 Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hssogsdiams6aaircb/hssogsdiams6aulrcb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to...

PT-2026-70942

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme s6a subscription data from avp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdn len can lead to heap-based buffer overflow. ...

PT-2026-70845

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss ogs diam s6a air cb/hss ogs diam s6a ulr cb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is...