65 matches found
CVE-2023-37019
Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an S1Setup Request message missing a required Supported TAs field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37021
Open5GS MME version = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Context Modification Failure message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37010
Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an eNB Status Transfer message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
CVE-2023-37019
The CVE-2023-37019 issue affects Open5GS MME prior to 2.6.4. An assertion can be remotely triggered by a malformed ASN.1 packet on the S1AP interface, specifically by sending an S1Setup Request missing the required Supported TAs field. This can cause the MME to crash repeatedly, leading to Denial...