This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-24450 | BDVDB-2026-255372 Detail

Description#

Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN5G AMF <= 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resource Setup Response with a suffciently large FailedToSetupList IE.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.