CVE-2024-24445

OpenAirInterface CN5G AMF oai-cn5g-amf = 2.0.0 contains a null dereference in its handling of unsupported NGAP protocol messages which allows an attacker with network-adjacent access to the AMF to carry out denial of service. When a procedure code/presence field tuple is received that is...

CVE-2024-24443

An uninitialized pointer dereference in the ngaphandlepdusessionresourcesetupresponse routine of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted PDU Session Resource Setup Response...

PT-2025-2384

Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF oai-cn5g-amf version 2.0.0 and earlier Description: The issue is related to a null dereference in the handling of unsupported NGAP protocol messages. When a procedure code/presence field tuple is received that is...

CVE-2024-24443

An uninitialized pointer dereference in the ngaphandlepdusessionresourcesetupresponse routine of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted PDU Session Resource Setup Response...

CVE-2024-24442

A NULL pointer dereference in the ngapapp::handlereceive routine of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted NGAP message...

OpenAirInterface CN5G AMF code issue vulnerability

OpenAirInterface CN5G AMF is an OpenAirInterface open source application. A security vulnerability exists in OpenAirInterface CN5G AMF v2.0.0 and earlier versions that stems from the presence of uninitialized pointer dereferences, which allows an attacker to trigger a denial of service DoS via a...

CVE-2024-24442

A NULL pointer dereference in the ngapapp::handlereceive routine of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted NGAP message...

CVE-2024-24442: NULL Pointer Dereference

A NULL pointer dereference in the ngapapp::handlereceive routine of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted NGAP message...

OpenAirInterface CN5G AMF security vulnerability

OpenAirInterface CN5G AMF is an OpenAirInterface open source application. A security vulnerability exists in OpenAirInterface CN5G AMF v2.0.0 and earlier versions, which stems from the presence of a stack overflow that allows an attacker to cause a denial of service DoS by repeatedly establishing...

PT-2025-2381

Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF oai-cn5g-amf versions up to v2.0.0 Description: A NULL pointer dereference in the ngap app::handle receive routine allows attackers to cause a Denial of Service DoS via a crafted NGAP message. This issue can be...

CVE-2024-24451

A stack overflow in the sctpserver::sctpreceiverthread component of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS by repeatedly establishing SCTP connections with the N2 interface...

CVE-2024-24451

A stack overflow exists in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) versions up to v2.0.0 . An attacker can exploit this vulnerability by repeatedly establishing SCTP connections with the N2 interface , resulting in a Denial of Service (DoS) . As...

CVE-2024-24442

The OpenAirInterface CN5G AMF (oai-cn5g-amf) application, versions up to v2.0.0 , is vulnerable to a NULL pointer dereference within the ngap_app::handle_receive routine. An attacker can exploit this flaw by sending a crafted NGAP message , leading to a Denial of Service (DoS) that disrupts the s...

CVE-2024-24444

The OpenAirInterface CN5G AMF (oai-cn5g-amf) application, version v2.0.0 and earlier , is vulnerable to a Denial of Service (DoS) attack due to improper file descriptor handling for closed connections. An attacker can exploit this by repeatedly establishing SCTP connections with the N2 interface ...

CVE-2024-24445

OpenAirInterface CN5G AMF (oai-cn5g-amf) versions 2.0.0 and earlier are vulnerable to a null pointer dereference during the processing of unsupported NGAP protocol messages . When the software receives a procedure code/presence field tuple that is not supported, it indexes into a null function po...

CVE-2024-24443: NULL Pointer Dereference

An uninitialized pointer dereference in the ngaphandlepdusessionresourcesetupresponse routine of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted PDU Session Resource Setup Response...

CVE-2024-24443

The OpenAirInterface CN5G AMF (oai-cn5g-amf) software, in versions up to v2.0.0 , is vulnerable to a Denial of Service (DoS) . The root cause is an uninitialized pointer dereference within the ngap_handle_pdu_session_resource_setup_response routine. An attacker can exploit this by sending a craft...

CVE-2024-24445: NULL Pointer Dereference

OpenAirInterface CN5G AMF oai-cn5g-amf = 2.0.0 contains a null dereference in its handling of unsupported NGAP protocol messages which allows an attacker with network-adjacent access to the AMF to carry out denial of service. When a procedure code/presence field tuple is received that is...

CVE-2024-24451

A stack overflow in the sctpserver::sctpreceiverthread component of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS by repeatedly establishing SCTP connections with the N2 interface...

PT-2025-2385

Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF oai-cn5g-amf versions up to v2.0.0 Description: A stack overflow in the sctp server::sctp receiver thread component allows attackers to cause a Denial of Service DoS by repeatedly establishing SCTP connections with t...