PT-2024-1932

Name of the Vulnerable Software and Affected Versions SolarWinds Security Event Manager affected versions not specified Description The SolarWinds Security Event Manager is susceptible to a Remote Code Execution vulnerability. This issue allows an unauthenticated user to abuse SolarWinds' service...

CVE-2023-50019

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

Design/Logic Flaw

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

Design/Logic Flaw

An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF...

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability that can be exploited by an attacker to cause AMF to crash...

CVE-2023-50020

Open5GS v2.6.6 is affected by CVE-2023-50020. A SIGPIPE condition can crash the AMF, per multiple sources (NVD/Red Hat/CNNVD). Reported impact is availability disruption (CVE base score 7.5, HIGH). No exploitation details are provided in the core documents. A practical workaround documented by PT...

CVE-2023-50019

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

CVE-2023-50019

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

PT-2024-13848 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: open5gs version 2.6.6 Description: An issue was discovered in open5gs where SIGPIPE can be used to crash AMF. Recommendations: For open5gs version 2.6.6, as a temporary workaround, consider disabling the use of SIGPIPE until a patch is...

CVE-2023-50020

An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF...

CVE-2023-50019

The CVE-2023-50019 entry concerns Open5GS v2.6.6, where an issue in InitialUEMessage leads to an AMF crash due to incorrect error handling of Nudm_UECM_Registration responses. The vulnerability is categorized as a Denial of Service risk with a CVSS v3.1 base score of 5.9 (NETWORK attack vector, H...

GHSA-JCRR-RR6W-8C83 free5GC AMF denial of service vulnerability

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

free5GC AMF denial of service vulnerability

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

Code injection

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

PT-2023-31200 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: free5GC version 3.3.0 Description: An issue in the software allows remote attackers to execute arbitrary code and cause a denial of service DoS on the AMF component via a crafted NGAP message. Recommendations: For free5GC version 3.3.0,...

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

SUSE CVE-2006-4192

Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...