CVE-2024-24428

Published: Jan 21, 2025Modified: Jan 24, 2025

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.

Affected (1)

Products: Open5gs: Open5gs

Open5gs

1 product

Open5gs

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Open5gs Open5gs	Up to 2.6.4

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (1)

https://cellularsecurity.org/ransacked

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.