VYPR

E2T

by O-RAN

CVEs (2)

  • CVE-2024-34045HigApr 30, 2024
    risk 0.49cvss 7.5epss 0.01

    The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2setup]->Increment().

  • CVE-2024-34044MedApr 30, 2024
    risk 0.34cvss 5.3epss 0.00

    The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL.