CVE-2024-34034

Published: Feb 25, 2025Modified: Jun 17, 2026Deferred

5.7

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Exploitability: 0.9 / Impact: 4.7

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in FlexRIC 2.0.0. It crashes during a Subscription Request denial-of-service (DoS) attack, triggered by an assertion error. An attacker must send a high number of E42 Subscription Requests to the Near-RT RIC component.

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (2)

https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f

Source: cve@mitre.org

https://gitlab.eurecom.fr/mosaic5g/flexric/-/tags/v2.0.0

Source: cve@mitre.org

Timeline

No history available yet.