214 matches found
CVE-2024-24426
Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...
CVE-2024-24426
Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...
CVE-2024-24426: Improper Neutralization of Special Elements used in an OS Command
Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...
PT-2024-20400 · Unknown · Openairinterface Cn5G Amf
Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF versions = 2.0.0 Description: The issue is a stack-based memcpy buffer overflow in the ngap handle pdu session resource setup response routine. This allows a remote attacker with access to the N2 interface to...
CVE-2024-24426
Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...
CVE-2024-24426
The OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 software are vulnerable to a Denial of Service (DoS) attack. The root cause is reachable assertions within the NGAP_FIND_PROTOCOLIE_BY_ID function, which can be triggered by an attacker sending a crafted NGAP packet . To mitigate thi...
Arbitrary Code Execution
github.com/free5gc/amf/ is vulnerable to Arbitrary Code Execution. The vulnerability arises due to a lack of validation for invalid NGAP messages. An attacker can execute remote code and cause DoS via a crafted NGAP message...
GHSA-JCRR-RR6W-8C83 free5GC AMF denial of service vulnerability
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
free5GC AMF denial of service vulnerability
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
Code injection
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391: Improper Control of Generation of Code
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...
CVE-2023-49391
The CVE-2023-49391 issue affects free5GC version 3.3.0, specifically the AMF component handling NGAP messages. The root cause is insufficient validation of NGAP messages, enabling remote code execution and DoS via a crafted NGAP message (per Veracode and related feeds). A CVSSv3.1 base score of 7...
Denial Of Service (DoS)
github.com/free5gc/free5gc is vulnerable to Denial Of Service DoS. The vulnerability exists due to a null pointer dereference when failing to resolve the IP of a ngap message resulting in an application crash...
Open5GS ngap-handler.c Denial of Service Vulnerability
Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS v2.4.11 due to a memory leak in the ngap handler.c component. By using a specially crafted UE attachment, an attacker can exploit this...