VYPR
← All advisories
Unrated severityNVD Advisory· Published May 4, 2024· Updated Aug 2, 2024

CVE-2024-34475

CVE-2024-34475

Description

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmm_state_authentication in amf/gmm-sm.c for != OGS_ERROR.

Affected products

2
  • Open5gs/Open5gscpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <2.7.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.