Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in the Open5GS oainas5gmmdecode function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted NGAP packe...

CVE-2024-24428

A reachable assertion in the oainas5gmmdecode function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NGAP packet...

CVE-2024-24428

Vulnerability summary (CVE-2024-24428) : Open5GS (Open5GS) contains a reachable assertion in the oai_nas_5gmm_decode function, enabling a Denial of Service (DoS) through crafted NGAP packets. Affected software: Open5GS up to version 2.6.4 (inclusive). The core issue is in the oai_nas_5gmm_decode ...

CVE-2024-24442

CVE-2024-24442 describes a NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to version 2.0.0, allowing an attacker to cause a Denial of Service via a crafted NGAP message. The vulnerability is consistently described across multiple fe...

PT-2025-2377 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions 2.6.4 and earlier Description: A reachable assertion in the oai nas 5gmm decode function allows attackers to cause a Denial of Service DoS via a crafted NGAP packet. Recommendations: For Open5GS versions 2.6.4 and earlier,...

SUSE CVE-2024-24426

Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...

CVE-2024-24426

Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...

CVE-2024-24426

Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...

PT-2024-20400 · Unknown · Openairinterface Cn5G Amf

Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF versions = 2.0.0 Description: The issue is a stack-based memcpy buffer overflow in the ngap handle pdu session resource setup response routine. This allows a remote attacker with access to the N2 interface to...

CVE-2024-24426

Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...

CVE-2024-24426

CVE-2024-24426 affects OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0. The root cause is reachable assertions in NGAP_FIND_PROTOCOLIE_BY_ID, enabling DoS via a crafted NGAP packet. Mitigations documented in connected sources include (for Magma v1.8.0) disabling the NGAP FIND PROTOCOL...

Arbitrary Code Execution

github.com/free5gc/amf/ is vulnerable to Arbitrary Code Execution. The vulnerability arises due to a lack of validation for invalid NGAP messages. An attacker can execute remote code and cause DoS via a crafted NGAP message...

free5GC AMF denial of service vulnerability

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

GHSA-JCRR-RR6W-8C83 free5GC AMF denial of service vulnerability

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

Code injection

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

CVE-2023-49391

The CVE-2023-49391 issue affects free5GC version 3.3.0, specifically the AMF component handling NGAP messages. The root cause is insufficient validation of NGAP messages, enabling remote code execution and DoS via a crafted NGAP message (per Veracode and related feeds). A CVSSv3.1 base score of 7...