CVE-2024-24450

A stack-based memcpy buffer overflow exists in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface CN5G AMF versions

CVE-2024-24446: NULL Pointer Dereference

An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialContextSetupResponse message sent to the AMF...

CVE-2024-24426: Improper Neutralization of Special Elements used in an OS Command

Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...

CVE-2024-24450: Buffer Copy without Checking Size of Input

Stack-based memcpy buffer overflow in the ngaphandlepdusessionresourcesetupresponse routine in OpenAirInterface CN5G AMF = 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resource...

CVE-2024-24449: Access of Uninitialized Pointer

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...

CVE-2024-24446

The OpenAirInterface CN5G AMF software, specifically versions up to v2.0.0 , is vulnerable to an uninitialized pointer dereference . An attacker can exploit this flaw by sending a crafted InitialContextSetupResponse message to the AMF, resulting in a Denial of Service (DoS) . To remediate this is...

CVE-2024-24426

Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...

CVE-2024-24449

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...

CVE-2024-24449

The OpenAirInterface CN5G AMF software, in versions up to v2.0.0 , is vulnerable to a Denial of Service (DoS) attack. The root cause is an uninitialized pointer dereference located within the NasPdu::NasPdu component. An attacker can trigger this vulnerability by sending a crafted InitialUEMessag...

OpenAirInterface CN5G AMF security vulnerability

OpenAirInterface CN5G AMF is an OpenAirInterface open source application. A security vulnerability exists in OpenAirInterface CN5G AMF v2.0.0 and earlier versions, which originates from an uninitialized pointer dereference and allows an attacker to trigger a denial of service DoS by sending a...

CVE-2024-24446

An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialContextSetupResponse message sent to the AMF...

PT-2024-20396 · Unknown · Openairinterface Cn5G Amf

Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF versions up to 2.0.0 Description: The issue is caused by an uninitialized pointer dereference, allowing attackers to cause a Denial of Service DoS via a crafted InitialContextSetupResponse message sent to the AMF...