CVE-2024-34475

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...

CVE-2024-34475

Open5GS versions prior to 2.7.1 are vulnerable to a reachable assertion (CWE-617) within the gmm_state_authentication function in amf/gmm-sm.c. An attacker can trigger this assertion via NAS messages from a User Equipment (UE) when the condition != OGS_ERROR is met, resulting in an AMF crash . To...