CVE-2024-34044: NULL Pointer Dereference

The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL...

CVE-2023-52727: Out-of-bounds Read

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits...

CVE-2023-52725: Out-of-bounds Write

Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package...

CVE-2023-52724: Out-of-bounds Write

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function...

CVE-2023-52726: Loop with Unreachable Exit Condition

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

CVE-2023-52727

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits...

CVE-2023-52724

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function...

CVE-2023-52728

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString...

CVE-2023-52728

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString...

CVE-2024-34047

The O-RAN RIC I-Release e2mgr software is vulnerable to an improper validation of array index (CWE-129) due to missing array size checks in the RicServiceUpdateHandler component. This vulnerability could lead to memory corruption or other stability issues depending on the execution context. While...

CVE-2023-52724

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

Design/Logic Flaw

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

O-RAN Software Community ric-plt-e2mgr Security Vulnerability

O-RAN Software Community ric-plt-e2mgr is an open source library from O-RAN Software Community. A security vulnerability exists in O-RAN Software Community ric-plt-e2mgr. An attacker could exploit this vulnerability to cause a denial of service DoS by sending a specially crafted request to the...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

CVE-2023-42358

CVE-2023-42358 affects the O-RAN Software Community ric-plt-e2mgr in the G-Release environment. A crafted request to the E2Manager API can cause a denial of service (DoS). Public sources (Red Hat, NVD, CNNVD, CVE listings) corroborate the DoS impact and indicate the issue exists without publicly ...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

PT-2024-13038 · O Ran Software Community · Ric-Plt-E2Mgr

Name of the Vulnerable Software and Affected Versions: O-RAN Software Community ric-plt-e2mgr in the G-Release environment Description: An issue was discovered that allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component. Recommendations: At t...

Opening Critical Infrastructure: The Current State of Open RAN Security

The Open Radio Access Network ORAN architecture provides standardized interfaces and protocols to previously closed systems. However, our research on ORAN demonstrates the potential threat posed by malicious xApps that are capable of compromising the entire Ran Intelligent Controller RIC subsyste...

CVE-2023-41628

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...