CVE-2023-37020

creationtimestamp| type| source ---|---|--- 2025-01-22 15:17:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdnyr5uxb2j...

CVE-2023-37020

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Context Release Complete message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...

CVE-2023-37020

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Context Release Complete message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...

CVE-2023-37020

Open5GS MME versions prior to 2.6.4 are vulnerable to a denial of service attack due to a reachable assertion. An attacker can remotely trigger this crash by sending a malformed ASN.1 packet over the S1AP interface , specifically a UE Context Release Complete message missing the mandatory MME_UE_...

CVE-2023-37020

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Context Release Complete message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...