CVE-2024-34048

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...

CVE-2024-34048

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...

CVE-2024-34047

O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler...

PT-2024-25665 · O Ran · O-Ran Ric I-Release E2Mgr

Name of the Vulnerable Software and Affected Versions: O-RAN RIC I-Release e2mgr affected versions not specified Description: The issue is related to a lack of array size checks in the E2nodeConfigUpdateNotificationHandler of the O-RAN RIC I-Release e2mgr. No information is provided about the...

PT-2024-25664 · O Ran · O-Ran Ric I-Release E2Mgr

Name of the Vulnerable Software and Affected Versions: O-RAN RIC I-Release e2mgr affected versions not specified Description: The issue is related to a lack of array size checks in the RicServiceUpdateHandler of the O-RAN RIC I-Release e2mgr. Recommendations: At the moment, there is no informatio...

CVE-2023-52724: Out-of-bounds Write

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function...

CVE-2023-52724

The Open Networking Foundation SD-RAN onos-kpimon version 0.4.7 is vulnerable to an out-of-bounds array access within the processIndicationFormat1 function. This issue arises from the improper handling of array indices, which could allow an attacker to cause a crash or potentially achieve arbitra...

O-RAN RIC security vulnerabilities

O-RAN RIC is a RIC application from O-RAN. A security vulnerability exists in O-RAN RIC I-Release e2mgr, which stems from a missing array size check in E2nodeConfigUpdateNotificationHandler...

PHP security vulnerabilities

PHP is a scripting language in which PHP is executed server-side. A security vulnerability exists in PHP that originates when using the procopen command with array syntax, due to insufficient escaping, which allows a user to supply parameters to execute arbitrary commands in the Windows shell if...

CVE-2024-34047: Improper Validation of Array Index

O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler...

CVE-2024-34048: Improper Validation of Array Index

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...

CVE-2024-34048

The O-RAN RIC I-Release e2mgr software contains a security vulnerability due to missing array size checks in the E2nodeConfigUpdateNotificationHandler component. This improper validation of array indices can lead to memory safety issues. While the CVSS v3.1 score is 9.8 (CRITICAL) , indicating a ...

CVE-2024-34047

O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler...

CVE-2024-1874: Improper Encoding or Escaping of Output

In PHP versions 8.1. before 8.1.28, 8.2. before 8.2.18, 8.3. before 8.3.5, when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands ...

CVE-2024-34048

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...

CVE-2024-34048

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...

CVE-2023-52724

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function...

CVE-2023-52724

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function...

PT-2024-8926 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the clk dvp probe function in the Linux kernel, where the -num member is assigned after -hws has been accessed. This can cause an array-index-out-of-bounds...

DEBIAN-CVE-2022-48661

In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: Fix potential resource leakage when register a chip If creation of software node fails, the locally allocated string array is left unfreed. Free it on error path...