CVE-2024-34475

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...

CVE-2024-34475

Versions of Open5GS prior to 2.7.1 are vulnerable to a reachable assertion in the gmm_state_authentication function located in amf/gmm-sm.c. An attacker can trigger an AMF crash by sending specific NAS messages from a User Equipment (UE) when the condition != OGS_ERROR is met. To remediate this v...