CVE-2024-34048: Improper Validation of Array Index

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...

CVE-2024-34044: NULL Pointer Dereference

The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL...

CVE-2024-34048

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...

PT-2024-25660 · O Ran · O-Ran Ricapp Kpimon-Go

Name of the Vulnerable Software and Affected Versions: O-RAN RICAPP kpimon-go I-Release affected versions not specified Description: The issue is related to a segmentation violation that occurs via a certain E2AP-PDU message. Recommendations: At the moment, there is no information about a newer...

PT-2024-25664 · O Ran · O-Ran Ric I-Release E2Mgr

Name of the Vulnerable Software and Affected Versions: O-RAN RIC I-Release e2mgr affected versions not specified Description: The issue is related to a lack of array size checks in the RicServiceUpdateHandler of the O-RAN RIC I-Release e2mgr. Recommendations: At the moment, there is no informatio...

CVE-2024-34047

O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler...

CVE-2024-34048

The O-RAN RIC I-Release e2mgr software contains a security vulnerability due to missing array size checks in the E2nodeConfigUpdateNotificationHandler component. This improper validation of array indices can lead to memory safety issues. While the CVSS v3.1 score is 9.8 (CRITICAL) , indicating a ...

PT-2024-25665 · O Ran · O-Ran Ric I-Release E2Mgr

Name of the Vulnerable Software and Affected Versions: O-RAN RIC I-Release e2mgr affected versions not specified Description: The issue is related to a lack of array size checks in the E2nodeConfigUpdateNotificationHandler of the O-RAN RIC I-Release e2mgr. No information is provided about the...

CVE-2024-34045

The O-RAN E2T I-Release software contains a vulnerability where the Prometheus metric Increment function can cause a crash. Specifically, the crash occurs within sctpThread.cpp when the Increment() function is invoked for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2set...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

Design/Logic Flaw

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

CVE-2023-42358

CVE-2023-42358 affects the O-RAN Software Community ric-plt-e2mgr in the G-Release environment. A crafted request to the E2Manager API can cause a denial of service (DoS). Public sources (Red Hat, NVD, CNNVD, CVE listings) corroborate the DoS impact and indicate the issue exists without publicly ...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

PT-2024-13038 · O Ran Software Community · Ric-Plt-E2Mgr

Name of the Vulnerable Software and Affected Versions: O-RAN Software Community ric-plt-e2mgr in the G-Release environment Description: An issue was discovered that allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component. Recommendations: At t...

CVE-2023-41627

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...

CVE-2023-41628

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...

Code injection

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...

Design/Logic Flaw

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...

CVE-2023-41628

CVE-2023-41628 affects the O-RAN Software Community E2 G-Release. A vulnerability in the messaging procedure between E2Node and E2Term can allow an attacker to cause a Denial of Service (DoS). The available documents specify the issue and its impact but do not provide explicit exploit details, af...