214 matches found
CVE-2024-24426
Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...
CVE-2024-24426: Improper Neutralization of Special Elements used in an OS Command
Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...
CVE-2024-24426
Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...
PT-2024-20400 · Unknown · Openairinterface Cn5G Amf
Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF versions = 2.0.0 Description: The issue is a stack-based memcpy buffer overflow in the ngap handle pdu session resource setup response routine. This allows a remote attacker with access to the N2 interface to...
CVE-2024-24426
Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...
CVE-2024-24426
The OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 software are vulnerable to a Denial of Service (DoS) attack. The root cause is reachable assertions within the NGAP_FIND_PROTOCOLIE_BY_ID function, which can be triggered by an attacker sending a crafted NGAP packet . To mitigate thi...
Arbitrary Code Execution
github.com/free5gc/amf/ is vulnerable to Arbitrary Code Execution. The vulnerability arises due to a lack of validation for invalid NGAP messages. An attacker can execute remote code and cause DoS via a crafted NGAP message...
free5GC AMF denial of service vulnerability
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
GHSA-JCRR-RR6W-8C83 free5GC AMF denial of service vulnerability
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
Code injection
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391: Improper Control of Generation of Code
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391
The CVE-2023-49391 issue affects free5GC version 3.3.0, specifically the AMF component handling NGAP messages. The root cause is insufficient validation of NGAP messages, enabling remote code execution and DoS via a crafted NGAP message (per Veracode and related feeds). A CVSSv3.1 base score of 7...
Denial Of Service (DoS)
github.com/free5gc/free5gc is vulnerable to Denial Of Service DoS. The vulnerability exists due to a null pointer dereference when failing to resolve the IP of a ngap message resulting in an application crash...
Open5GS ngap-handler.c Denial of Service Vulnerability
Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS v2.4.11 due to a memory leak in the ngap handler.c component. By using a specially crafted UE attachment, an attacker can exploit this...