272 matches found
CVE-2024-34045
CVE-2024-34045 affects the O-RAN E2T I-Release Prometheus metric Increment function. The vulnerability is a crash in sctpThread.cpp triggered when Increment() is called for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2setup]->Increment(). The dataset confirms this ca...
CVE-2023-52728
CVE-2023-52728 affects Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25. The vulnerability is an index out-of-range in the putBitString function, causing an availability impact (DoS) as per the CVSS data. Multiple connected sources corroborate the affected component/version and the root...
CVE-2024-34046
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-sctpParams-e2tCountersINSUCCMSGCOUNTERProcedureCodeidRICsubscription-Increment...
CVE-2023-52724
Open Networking Foundation SD-RAN onos-kpimon 0.4.7 is affected by an out-of-bounds array access in the processIndicationFormat1 function. CVE-2023-52724 is rated CVSSv3.1 base 8.1 (HIGH) with network attack vector, low attack complexity, and no user interaction. Veracode corroborates out-of-boun...
CVE-2024-34047
Summary: CVE-2024-34047 affects the O-RAN RIC I-Release e2mgr, where the RicServiceUpdateHandler is missing array size checks. Affected component: O-RAN RIC I-Release e2mgr (RicServiceUpdateHandler function). Root cause (as stated): lack of array size checks in RicServiceUpdateHandler. Impact (as...
CVE-2024-34049
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString0:3, plmnIdString3:" in reader.go...
CVE-2023-52724
Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function...
CVE-2024-34048
O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...
CVE-2024-34050
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64b216 | uint64b18 | uint64b0" in reader.go...
CVE-2024-34049
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString0:3, plmnIdString3:" in reader.go...
CVE-2024-34044
The CVE-2024-34044 entry concerns the O-RAN E2T I-Release: the buildPrometheusList function can dereference a NULL peerInfo, leading to a NULL pointer dereference. Multiple connected sources (NVD, Red Hat, CNNVD, CVE listings) corroborate the issue; the underlying cause is peerInfo being NULL wit...
CVE-2024-34047
O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler...
CVE-2024-34045
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...
CVE-2024-34049
Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString0:3, plmnIdString3:" in reader.go...
CVE-2023-52728
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString...
PT-2024-25660 · O Ran · O-Ran Ricapp Kpimon-Go
Name of the Vulnerable Software and Affected Versions: O-RAN RICAPP kpimon-go I-Release affected versions not specified Description: The issue is related to a segmentation violation that occurs via a certain E2AP-PDU message. Recommendations: At the moment, there is no information about a newer...
CVE-2024-34046
The CVE-2024-34046 entry describes a crash in the O-RAN E2T I-Release Prometheus metric Increment function, triggered when Increment() is called on message.peerInfo->sctpParams->e2tCounters[IN_SUCC][MSG_COUNTER][ProcedureCode_id_RICsubscription]->Increment() in sctpThread.cpp. Affected c...
CVE-2023-52727
The CVE concerns Open Networking Foundation's ONOS project, specifically the onos-lib-go component at version 0.10.25, with the root cause in parseAlignBits causing an index out-of-range condition. Reported impacts in multiple sources describe an Out-of-Bounds Read leading to potential Denial of ...