CVE-2024-34476

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...

CVE-2024-34476

Open5GS versions prior to 2.7.1 are vulnerable to a denial of service condition. The root cause is a reachable assertion in the ogs_nas_encrypt function (located in lib/nas/common/security.c) due to improper handling of the pkbuf->len variable. An attacker can exploit this by sending specific ...