625 matches found
CVE-2022-40890
A vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service...
Open5GS 安全漏洞
Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which originates from the amfgnbfindbyaddr function in /src/amf/amf-context.c that only detects the Ip address and does not detect if it i...
PT-2022-25612 · Open5Gs · Open5Gs
Name of the Vulnerable Software and Affected Versions: Open5GS versions 2.4.10 and earlier Description: A vulnerability in the /src/amf/amf-context.c file leads to an AMF denial of service. Recommendations: For Open5GS versions 2.4.10 and earlier, at the moment, there is no information about a...
CVE-2022-3299
A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the library lib/sbi/client.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The name of th...
Design/Logic Flaw
A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the library lib/sbi/client.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The name of th...
CVE-2022-3299 Open5GS AMF client.c denial of service
A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the library lib/sbi/client.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The name of th...
CVE-2022-3299 Open5GS AMF client.c denial of service
A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the library lib/sbi/client.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The name of th...
CVE-2022-3299 Open5GS AMF client.c denial of service
A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the library lib/sbi/client.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The name of th...
PyAMF vulnerable to XML external entity (XXE)
PyAMF provides Action Message Format AMF support for Python that is compatible with the Adobe Flash Player. It includes integration with Python web frameworks like Django, Pylons, Twisted, SQLAlchemy, web2py and more. XML external entity XXE vulnerability in PyAMF before 0.8.0 allows remote...
GHSA-M7M4-4VM8-55WG PyAMF vulnerable to XML external entity (XXE)
PyAMF provides Action Message Format AMF support for Python that is compatible with the Adobe Flash Player. It includes integration with Python web frameworks like Django, Pylons, Twisted, SQLAlchemy, web2py and more. XML external entity XXE vulnerability in PyAMF before 0.8.0 allows remote...
Deserialization of Untrusted Data in Flamingo amf-serializer
The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The ability to exploit this vulnerability...
Open5GS Denial of Service Vulnerability (CNVD-2022-61341)
Open5Gs is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial-of-service vulnerability exists in Open5GS version 2.3.6 and earlier, which stems from a null pointer reference in src/amf/namf-handler.c. The vulnerability is caused by a specially...
CVE-2021-44108
A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request to amf...
CVE-2021-44108
A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request to amf...
CVE-2021-44108
A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request to amf...
CVE-2021-44108
Open5GS (C) vulnerable: a null pointer dereference in src/amf/namf-handler.c affects Open5GS
Open5Gs Denial of Service Vulnerability
Open5Gs is a C open source implementation of 5G Core and Epc, the core network for the Lte/Nr network.A denial of service vulnerability exists in Open5Gs version 2.1.4 of AMF, which stems from a network system or product that does not properly validate data boundaries when performing operations o...
CVE-2021-44081
A buffer overflow vulnerability exists in the AMF of open5gs 2.1.4. When the length of MSIN in Supi exceeds 24 characters, it leads to AMF denial of service...