1611 matches found
CVE-2023-37015
Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a Path Switch Request message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37022
Open5GS MME versions = 2.6.4 contain a reachable assertion in the UE Context Release Request packet handler. A packet containing an invalid MMEUES1APID field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denial of service...
CVE-2023-37011
Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a Handover Required message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37012
Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an Initial UE Message message missing a required PLMN Identity field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37004
Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an Initial Context Setup Response message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37014
Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Context Release Request message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
CVE-2024-24432
A reachable assertion in the ogskdfhashmme function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...
CVE-2024-24427
A reachable assertion in the amfuesetsuci function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...
CVE-2024-24428
A reachable assertion in the oainas5gmmdecode function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NGAP packet...
Open5GS 安全漏洞
Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in the Open5GS amfuesetsuci function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted NGAP packet...
CVE-2024-24427
A reachable assertion in the amfuesetsuci function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...
Open5GS 安全漏洞
Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in the Open5GS oainas5gmmdecode function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted NGAP packe...
CVE-2024-24428
Vulnerability summary (CVE-2024-24428) : Open5GS (Open5GS) contains a reachable assertion in the oai_nas_5gmm_decode function, enabling a Denial of Service (DoS) through crafted NGAP packets. Affected software: Open5GS up to version 2.6.4 (inclusive). The core issue is in the oai_nas_5gmm_decode ...
CVE-2024-24428
A reachable assertion in the oainas5gmmdecode function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NGAP packet...
PT-2025-2377 · Open5Gs · Open5Gs
Name of the Vulnerable Software and Affected Versions: Open5GS versions 2.6.4 and earlier Description: A reachable assertion in the oai nas 5gmm decode function allows attackers to cause a Denial of Service DoS via a crafted NGAP packet. Recommendations: For Open5GS versions 2.6.4 and earlier,...
CVE-2024-24427
A reachable assertion in the amfuesetsuci function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...
CVE-2024-24428
A reachable assertion in the oainas5gmmdecode function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NGAP packet...
CVE-2024-24427
Open5GS has a vulnerability CVE-2024-24427 in the amf_ue_set_suci function, affecting Open5GS ≤ 2.6.4. A reachable assertion can be triggered by a crafted NAS packet, leading to a Denial of Service. The available connected sources consistently describe this issue and the affected version, but no ...