331 matches found
CVE-2024-34049
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString0:3, plmnIdString3:" in reader.go...
CVE-2024-34043
O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...
CVE-2023-52725
Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package...
CVE-2023-52725
Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package...
CVE-2024-34044
The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL...
CVE-2024-34047
O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler...
CVE-2024-34046
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-sctpParams-e2tCountersINSUCCMSGCOUNTERProcedureCodeidRICsubscription-Increment...
CVE-2024-34048
O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...
CVE-2024-34050
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64b216 | uint64b18 | uint64b0" in reader.go...
CVE-2024-34045: Uncontrolled Resource Consumption
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...
CVE-2024-34046: Allocation of Resources Without Limits or Throttling
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-sctpParams-e2tCountersINSUCCMSGCOUNTERProcedureCodeidRICsubscription-Increment...
CVE-2024-34047
O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler...
CVE-2024-34045
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...
CVE-2024-34048
The O-RAN RIC I-Release e2mgr software contains a security vulnerability due to missing array size checks in the E2nodeConfigUpdateNotificationHandler component. This improper validation of array indices can lead to memory safety issues. While the CVSS v3.1 score is 9.8 (CRITICAL) , indicating a ...
O-RAN RIC 安全漏洞
O-RAN RIC is a RIC application from O-RAN. A security vulnerability exists in O-RAN RIC I-Release e2mgr, which stems from a missing array size check in E2nodeConfigUpdateNotificationHandler...
CVE-2023-52726
The Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go version 0.8.12 is vulnerable to a Denial of Service (DoS) condition due to a loop with an unreachable exit condition (CWE-835). The root cause is the infinite repetition of error processing within the Subscribe function implementation whe...
PT-2024-25665 · O Ran · O-Ran Ric I-Release E2Mgr
Name of the Vulnerable Software and Affected Versions: O-RAN RIC I-Release e2mgr affected versions not specified Description: The issue is related to a lack of array size checks in the E2nodeConfigUpdateNotificationHandler of the O-RAN RIC I-Release e2mgr. No information is provided about the...
CVE-2023-52727: Out-of-bounds Read
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits...
CVE-2023-52726
Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...