CVE-2023-52728

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString...

CVE-2024-34048

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...

CVE-2023-52728

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString...

CVE-2024-34045

The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...

CVE-2024-34047

O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler...

CVE-2023-52726: Loop with Unreachable Exit Condition

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

CVE-2024-34049

Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString0:3, plmnIdString3:" in reader.go...

PT-2024-25660 · O Ran · O-Ran Ricapp Kpimon-Go

Name of the Vulnerable Software and Affected Versions: O-RAN RICAPP kpimon-go I-Release affected versions not specified Description: The issue is related to a segmentation violation that occurs via a certain E2AP-PDU message. Recommendations: At the moment, there is no information about a newer...

CVE-2024-34044: NULL Pointer Dereference

The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL...

CVE-2024-34044

The O-RAN E2T I-Release application contains a NULL pointer dereference vulnerability within the buildPrometheusList function. This issue occurs because the peerInfo variable can be NULL , potentially leading to application instability or a crash. While the specific affected versions are not deta...

CVE-2024-34046

The O-RAN E2T I-Release software contains a vulnerability where the Prometheus metric Increment function can cause a crash in sctpThread.cpp. The issue specifically occurs when the Increment() function is called for message.peerInfo->sctpParams->e2tCounters[IN_SUCC][MSG_COUNTER][ProcedureCo...

CVE-2023-52727

The Open Networking Foundation SD-RAN ONOS onos-lib-go version 0.10.25 is vulnerable to an Out-of-Bounds Read due to improper bounds checking in the parseAlignBits function. This flaw can trigger an index out-of-range condition , potentially leading to a Denial of Service (DoS) . While specific e...

CVE-2023-52727

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

Design/Logic Flaw

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

O-RAN Software Community ric-plt-e2mgr Security Vulnerability

O-RAN Software Community ric-plt-e2mgr is an open source library from O-RAN Software Community. A security vulnerability exists in O-RAN Software Community ric-plt-e2mgr. An attacker could exploit this vulnerability to cause a denial of service DoS by sending a specially crafted request to the...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

CVE-2023-42358

CVE-2023-42358 affects the O-RAN Software Community ric-plt-e2mgr in the G-Release environment. A crafted request to the E2Manager API can cause a denial of service (DoS). Public sources (Red Hat, NVD, CNNVD, CVE listings) corroborate the DoS impact and indicate the issue exists without publicly ...

PT-2024-13038 · O Ran Software Community · Ric-Plt-E2Mgr

Name of the Vulnerable Software and Affected Versions: O-RAN Software Community ric-plt-e2mgr in the G-Release environment Description: An issue was discovered that allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component. Recommendations: At t...